TMA-CISCO-IOSXR-1.8.1
Enable AES Password Encryption
Opis
You can enable strong, reversible 128-bit Advanced Encryption Standard (AES) password encryption, also known as type-6 encryption. To start using type-6 encryption, you must enable the AES password encryption feature and configure a master encryption key, which is used to encrypt and decrypt passwords. Encryption of passwords is used to protect it from being sent over the wire cleartext or being accidentally exposed when sharing device configurations with third parties. CIS assessment: Manual. Reported as SKIP with review instructions.
Kako se proverava
Metod provere: Ručni pregled
Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.
CIS assessment: Manual. Just verifying the running configuration might not be sufficient because it could be that no masterkey has been set. IOSXR# show run formal | i password6 password6 encryption aes Use the following show command to see if encryption is enabled and functional. Only when all three status are "Enabled" the feature is fully working.
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
! Define a password encryption key key config-key password-encryption New password Requirements: Min-length 6, Max-length 64 Characters restricted to [A-Z][a-z][0-9] Enter new key : Enter confirm key : Master key operation is started in background Enable aes config password encryption /* Enable Type 6 password encryption */ configure password6 encryption aes commit
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- cisco-iosxrnetworkaaa
- Referenca
- CIS Cisco IOS XR 7.x Benchmark v1.0.1 - 1.8.1 Enable AES Password Encryption