Set 'key' for each 'ntp server'

SrednjaNivo 2Automatskacisco-iosxr

Opis

Specifies the authentication key for NTP. This authentication feature provides protection against accidentally synchronizing the ntp system to another system that is not trusted, because the other system must know the correct authentication key. CIS marks this Manual; automated: fails if any NTP server has no 'key <id>'. Audited against the hierarchical output of 'show running-config' (run 'terminal length 0' first; not 'show running-config formal').

Kako se proverava

Metod provere: Obrazac konfiguracije

Obrazac: (?m)^ntp[^\n]*\n(?:[ \t][^\n]*\n)*?[ \t]+server (?:(?:[^k \t\n][^ \t\n]*|k(?:|[^e \t\n][^ \t\n]*|e(?:|[^y \t\n][^ \t\n]*|y(?:[^ \t\n][^ \t\n]*))))[ \t]+)*(?:(?:[^k \t\n][^ \t\n]*|k(?:|[^e \t\n][^ \t\n]*|e(?:|[^y \t\n][^ \t\n]*|y(?:[^ \t\n][^ \t\n]*)))))?$

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

! Configure each NTP Server to use a key ring using the following command. ntp server {ntp-server_ip_address} key {ntp_key_id}

Svojstva

Operativni sistemi: Bilo koji
Oznake: cisco-iosxrnetworkntp
Referenca: CIS Cisco IOS XR 7.x Benchmark v1.0.1 - 2.2.1.4 Set 'key' for each 'ntp server'

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target cisco-iosxr --level 2