NTP authentication

高レベル 2自動arista-eos

説明

NTP authentication verifies that time updates come from a trusted server, preventing bad actors from spoofing time or altering your clock. The NTP authentication model is the opposite of the typical client-server authentication model. NTP authentication enables an NTP client or peer to authenticate time received from their servers and peers. Authentication support allows the NTP client to verify that servers are in fact known and trusted and not intruders intending accidentally or intentionally to masquerade as a legitimate server. Requires 'ntp authentication-key' and 'ntp trusted-key'. Audited against the output of 'show running-config' (not 'show running-config all').

チェック方法

監査方法: 設定パターン

パターン: (?m)(?s:^ntp authentication-key \d+ \S+ \S.*^ntp trusted-key \d+)|(?s:^ntp trusted-key \d+.*^ntp authentication-key \d+ \S+ \S)

修正方法

修正方法: ガイダンスまたは IaC パッチ

ntp authentication-key 1 sha1 timesync ntp trusted-key 1

プロパティ

オペレーティングシステム: すべて
タグ: arista-eosnetworkntp
参照: CIS Arista EOS Benchmark v1.0.0 - 1.1.5 NTP authentication

このホストをチェック

監査が許可されているマシンで実行してください。スキャンは読み取り専用です。

shell

tmaegis scan --target arista-eos --level 2