Default & Fallback Local Authentication

高レベル 2手動レビューaruba-cx

説明

Local user names and passwords are configured on a per-switch basis and provide the most basic form of authentication. Enabled by default for all management access connection types - console, SSH, and https-server (REST).Local authentication is also often used as the fallback login method. Local authentication can provide a minimum- security level should the primary method fail, but does not completely disable management access to the switch

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Run 'show aaa authentication' and confirm local authentication is kept as the fallback (last) method for every management channel, so administrators can still log in when remote AAA servers are unreachable, and that a local administrator account exists.

修正方法

修正方法: ガイダンスまたは IaC パッチ

To configure a local administrator-level user named localadmin with interactive password entry: user localadmin group administrators password Enter password: ********** Confirm password: **********

プロパティ

オペレーティングシステム: すべて
タグ: aruba-cxauthentication
参照: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.5.2.1 Default & Fallback Local Authentication