Set 'login authentication for 'line vty'

VisokaNivo 1Automatskacisco-ios

Opis

Authenticates users who access the router or switch remotely through the VTY port. Using AAA authentication for interactive management access to the device provides consistent, centralized control of your network. The default under AAA (local or network) is to require users to log in using a valid user name and password. Fails if any 'line vty' block has no explicit 'login authentication <list>' line. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all' or 'show startup-config').

Kako se proverava

Metod provere: Obrazac konfiguracije

Obrazac: (?m)^line vty[^\n]*\n(?:[ \t]+(?:$|[^l \t\n]|l(?:$|[^o\n]|o(?:$|[^g\n]|g(?:$|[^i\n]|i(?:$|[^n\n]|n(?:$|[^ \n]| (?:$|[^a\n]|a(?:$|[^u\n]|u(?:$|[^t\n]|t(?:$|[^h\n]|h(?:$|[^e\n]|e(?:$|[^n\n]|n(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^c\n]|c(?:$|[^a\n]|a(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^o\n]|o(?:$|[^n\n]|n(?:$|[^ \n])))))))))))))))))))))[^\n]*\n)*(?:[^ \t]|\z)

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

! Configure management lines to require login using the default or a named AAA authentication list. This configuration must be set individually for all line types. line vty {line-number} [ending-line-number] login authentication {default | aaa_list_name}

Svojstva

Operativni sistemi: Bilo koji
Oznake: cisco-iosnetworklogging
Referenca: CIS Cisco IOS XE 17.x Benchmark v2.2.1 - 1.1.4 Set 'login authentication for 'line vty'

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target cisco-ios