Ensure PSNP authentication check is not set to suppressed

TinggiLevel 1Otomatisjuniper-junos

Deskripsi

IS-IS Neighbors should be authenticated. Where it is deployed, IS-IS routing is vital for normal operation of an organization's network infrastructure. Correct route information is required for routers to correctly direct traffic through the network. Audited against the output of 'show configuration | display set | no-more' (set format, not the curly-brace hierarchy).

Cara pemeriksaan

Metode audit: Pola konfigurasi

Pola: (?m)^set protocols isis [^\n]*\bno-psnp-authentication\b

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

! If you have deployed IS-IS in your network and have disabled PSNP authentication checking, re-enable it by issuing the following command from the hierarchy for each level at which it was set: delete protocols isis level <level> no-psnp-authentication

Properti

Sistem operasi: Apa saja
Tag: juniper-junosnetworkaaa
Referensi: CIS Juniper OS Benchmark v2.1.0 - 4.2.6 Ensure PSNP authentication check is not set to suppressed

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target juniper-junos