Remote Authentication - RADIUS/RadSec/TACACS+

VisokaNivo 2Automatskaaruba-cx

Opis

Remote Authentication involves the use of remote RADIUS , RadSec and TACACS+ servers for authenticating the management users. Remote AAA servers are used as single point of management to configure and store user accounts. They are often coupled with directories and management repositories, simplifying the setup and maintenance of the end-user accounts. PASS requires remote (RADIUS/RadSec/TACACS+) authentication for a management channel. Audited against AOS-CX 'show running-config' output (saved in full); context blocks such as 'password complexity' or 'cli-session' are matched by their indented member lines.

Kako se proverava

Metod provere: Obrazac konfiguracije

Obrazac: (?m)^aaa authentication login (?:default|console|ssh|telnet|https-server) group \S+

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

aaa authentication login default group tacacs1 local # CIS guidance: Enable remote authentication for desired management interface. Default – Includes all the management interfaces - aaa authentication login <console/default/ssh/telnet/https- <RADIUS/TACACS+ group-list>

Svojstva

Operativni sistemi: Bilo koji
Oznake: aruba-cxauthentication
Referenca: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.5.2.3 Remote Authentication - RADIUS/RadSec/TACACS+

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target aruba-cx --level 2