TMA-CISCO-NXOS-3.1.3.2
Authenticate OSPF peers with MD5 authentication keys
설명
If OSPF is configured, peers can be authenticated using keys. This is not configured by default. If configured, MD5 hashes are recommended as the authentication mechanism. MD5 is the best option for multi-vendor support, and is also the best cryptographic option available in the OSPF standard. CIS assessment: Manual. Reported as SKIP with review instructions.
점검 방법
감사 방식: 수동 검토
이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.
CIS assessment: Manual. The "show running-configuration ospf" lists the entire OSPF configuration. For all interfaces that face peers, ensure that these two commands are in place: interface <interfacename> ip ospf authentication message-digest ip ospf authentication key-chain <OSPF Key-Chain name> Each OSPF routeable interface should either have authentication configured or be configured as an OSPF passive interface.
조치 방법
조치 방식: 가이드 또는 인프라 패치
! For each OSPF routeable interface, set the message-digest authentication method, and assign the appropriate keychain. Each OSPF routeable interface should either have authentication configured or be configured as an OSPF passive interface. interface Vlan1 ip ospf authentication message-digest ip ospf authentication key-chain <OSPF Key Chain>
속성
- 운영 체제
- 모두
- 태그
- cisco-nxosnetworkaaa
- 참고 자료
- CIS Cisco NX-OS Benchmark v1.2.0 - 3.1.3.2 Authenticate OSPF peers with MD5 authentication keys