Juniper Junos
TMA-JUNIPER-JUNOS-4.2.7
Ensure CSNP authentication check is not set to suppressed
Опис
IS-IS Neighbors should be authenticated. Where it is deployed, IS-IS routing is vital for normal operation of an organization's network infrastructure. Correct route information is required for routers to correctly direct traffic through the network. Audited against the output of 'show configuration | display set | no-more' (set format, not the curly-brace hierarchy).
Како се проверава
Метод провере: Образац конфигурације
- Образац
(?m)^set protocols isis [^\n]*\bno-csnp-authentication\b
Како се исправља
Метод исправке: Смерница или закрпа инфраструктуре
! If you have deployed IS-IS in your network and have disabled CSNP authentication checking, re-enable it by issuing the following command from the hierarchy for each level at which it was set: delete protocols isis level <level> no-csnp-authentication
Својства
- Оперативни системи
- Било који
- Ознаке
- juniper-junosnetworkaaa
- Референца
- CIS Juniper OS Benchmark v2.1.0 - 4.2.7 Ensure CSNP authentication check is not set to suppressed
Проверите овај рачунар
Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.
tmaegis scan --target juniper-junos