OSPF Neighbor Authentication

VisokaNivo 1Ručni pregledaruba-cx

Opis

Enable OSPF Neighbor Authentication

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Where OSPF runs, run 'show ip ospf interface <id>' on every OSPF interface and confirm cryptographic authentication (keychain, preferably HMAC-SHA-512) is configured.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

AOS-CX keychain feature can be used to specify a system-level cryptographic authentication key which can be used by multiple OSPF interfaces - To configure the keychain with HMAC-SHA-512 cryptographic algorithm and keystring (Keystring can be entered as plaintext or as a hashed ciphertext string)- keychain <keychain-name> key <ID> cryptographic-algorithm hmac-sha-512 key-string plaintext <plaintext-key-string> To associate the keychain in the OSPF enabled interface - interface <interface-ID> ip ospf authentication keychain ip ospf keychain <keychain-name>

Svojstva

Operativni sistemi: Bilo koji
Oznake: aruba-cxauthentication
Referenca: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 3.1.1.2 OSPF Neighbor Authentication