TACACS Server Configuration

높음레벨 2자동aruba-cx

설명

TACACS+ is a centralized authentication, authorization, and accounting protocol that provides granular control over user access and command-level authorization for AOS- CX switches. It separates authentication, authorization, and accounting processes for enhanced flexibility. PASS requires a TACACS+ server host and an aaa tacacs server group. Audited against AOS-CX 'show running-config' output (saved in full); context blocks such as 'password complexity' or 'cli-session' are matched by their indented member lines.

점검 방법

감사 방식: 구성 패턴

패턴: (?m)(?:^tacacs-server host \S+(?s:.*?)^aaa group server tacacs \S+|^aaa group server tacacs \S+(?s:.*?)^tacacs-server host \S+)

조치 방법

조치 방식: 가이드 또는 인프라 패치

tacacs-server host 10.0.0.31 key plaintext <key> vrf mgmt aaa group server tacacs tacacs1 server 10.0.0.31 vrf mgmt # CIS guidance: To Configure TACACS+ Server - tacacs-server host {<FQDN> | <IPV4> | <IPV6>} [key [plaintext <PASSKEY> | ciphertext <PASSKEY>]] [vrf <VRF-NAME>] To Associate TACACS+ Server to the group - aaa group server tacacs <group-name> server <FQDN | IPv4 | IPv6> vrf <vrf> exit

속성

운영 체제: 모두
태그: aruba-cxauthentication
참고 자료: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.5.1.2 TACACS Server Configuration

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target aruba-cx --level 2