Ensure IS-IS Hello authentication check is not suppressed

높음레벨 1자동juniper-junos

설명

IS-IS Neighbors should be authenticated. Where it is deployed, IS-IS routing is vital for normal operation of an organization's network infrastructure. Correct route information is required for routers to correctly direct traffic through the network. Audited against the output of 'show configuration | display set | no-more' (set format, not the curly-brace hierarchy).

점검 방법

감사 방식: 구성 패턴

패턴: (?m)^set protocols isis [^\n]*\bno-hello-authentication\b

조치 방법

조치 방식: 가이드 또는 인프라 패치

! If you have deployed IS-IS in your network and have disabled hello authentication checking, re-enable it by issuing the following command from the hierarchy for each level at which it was configured: delete protocols isis level <level> no-hello-authentication

속성

운영 체제: 모두
태그: juniper-junosnetworkaaa
참고 자료: CIS Juniper OS Benchmark v2.1.0 - 4.2.5 Ensure IS-IS Hello authentication check is not suppressed

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target juniper-junos