TMA-CISCO-IOSXR-1.8.3
Configure a Password Policy
Deskripsi
Because passwords are stored only in revertible type 7 format, please consider not applying this recommendation and using secrets instead. This only applies if you absolutely need to configure "password" instead of "secret" for local users. Cisco IOS XR Software introduces advanced AAA password strengthening policy and security mechanism to store, retrieve and provide rules or policy to specify user passwords. Strong passwords are important because they help prevent unauthorized access to devices and the network. Even if a central authentication source is used, if that service is not available the fall-back authentication is often to local credentials. CIS assessment: Manual. Reported as SKIP with review instructions.
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
CIS assessment: Manual. IOSXR#sh run aaa aaa password-policy {password_policy} lifetime months 3 max-length 25 min-length 18 lockout-time days 1 min-char-change 5 authen-max-attempts 3 ! username {local_username} group root-lr group cisco-support secret {local_password} The policy is only in effect when it is also applied under a "username" section.
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
! Use the following configuration to enable a password policy. Choose values according to established guidelines of your organization. configure aaa password-policy {password_policy} min-length 8 max-length 25 lifetime months 3 min-char-change 5 authen-max-attempts 3 lockout-time days 1 username {local_username} password-policy {password_policy} password 0 {local_password} commit
Properti
- Sistem operasi
- Apa saja
- Tag
- cisco-iosxrnetworkaaa
- Referensi
- CIS Cisco IOS XR 7.x Benchmark v1.0.1 - 1.8.3 Configure a Password Policy