TMA-CISCO-IOSXR-2.1.3.1
Authentication (BGP)
Deskripsi
Enable message digest5 (MD5) authentication on a TCP connection between two BGP peers. Enforcing routing authentication reduces the likelihood of routing poisoning and unauthorized routers from joining BGP routing. CIS assessment: Manual. Reported as SKIP with review instructions.
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
CIS assessment: Manual. Verify you see the appropriate neighbor password is defined: IOSXR#sh run router bgp Wed Jul 19 22:02:46.892 UTC router bgp 100 neighbor 10.10.10.10 remote-as 200 password encrypted 104D000A061811021F0725282D3B303A
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
! Configure BGP neighbor authentication where feasible. router bgp {local_AS_number} neighbor {neighbor_IP_address} remote-as {remote_AS_number} neighbor {neighbor_IP_address} password clear {BGP_password}
Properti
- Sistem operasi
- Apa saja
- Tag
- cisco-iosxrnetworkaaa
- Referensi
- CIS Cisco IOS XR 7.x Benchmark v1.0.1 - 2.1.3.1 Authentication