Default & Fallback Local Authentication

높음레벨 2수동 검토aruba-cx

설명

Local user names and passwords are configured on a per-switch basis and provide the most basic form of authentication. Enabled by default for all management access connection types - console, SSH, and https-server (REST).Local authentication is also often used as the fallback login method. Local authentication can provide a minimum- security level should the primary method fail, but does not completely disable management access to the switch

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Run 'show aaa authentication' and confirm local authentication is kept as the fallback (last) method for every management channel, so administrators can still log in when remote AAA servers are unreachable, and that a local administrator account exists.

조치 방법

조치 방식: 가이드 또는 인프라 패치

To configure a local administrator-level user named localadmin with interactive password entry: user localadmin group administrators password Enter password: ********** Confirm password: **********

속성

운영 체제: 모두
태그: aruba-cxauthentication
참고 자료: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.5.2.1 Default & Fallback Local Authentication