Authentication (VRRP)

VisokaNivo 2Automatskacisco-iosxr

Opis

You can ensure that VRRP messages received from VRRP routers that comprise a virtual router are authenticated by configuring a simple text password. This is part of the VRRP authentication setup. Passes when VRRP is not configured. Audited against the hierarchical output of 'show running-config' (run 'terminal length 0' first; not 'show running-config formal').

Kako se proverava

Metod provere: Obrazac konfiguracije

Obrazac: (?m)\A(?:[ \t]*(?:$|[^at \t\n]|a(?:$|[^u\n]|u(?:$|[^t\n]|t(?:$|[^h\n]|h(?:$|[^e\n]|e(?:$|[^n\n]|n(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^c\n]|c(?:$|[^a\n]|a(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^o\n]|o(?:$|[^n\n]|n(?:$|[^ \n]))))))))))))))|t(?:$|[^e\n]|e(?:$|[^x\n]|x(?:$|[^t\n]|t(?:$|[^\-\n]|-(?:$|[^a\n]|a(?:$|[^u\n]|u(?:$|[^t\n]|t(?:$|[^h\n]|h(?:$|[^e\n]|e(?:$|[^n\n]|n(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^c\n]|c(?:$|[^a\n]|a(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^o\n]|o(?:$|[^n\n]|n(?:$|[^ \n]))))))))))))))))))))[^\n]*\n)*[ \t]*router vrrp[^\n]*(?:\n(?:[ \t]*(?:$|[^at \t\n]|a(?:$|[^u\n]|u(?:$|[^t\n]|t(?:$|[^h\n]|h(?:$|[^e\n]|e(?:$|[^n\n]|n(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^c\n]|c(?:$|[^a\n]|a(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^o\n]|o(?:$|[^n\n]|n(?:$|[^ \n]))))))))))))))|t(?:$|[^e\n]|e(?:$|[^x\n]|x(?:$|[^t\n]|t(?:$|[^\-\n]|-(?:$|[^a\n]|a(?:$|[^u\n]|u(?:$|[^t\n]|t(?:$|[^h\n]|h(?:$|[^e\n]|e(?:$|[^n\n]|n(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^c\n]|c(?:$|[^a\n]|a(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^o\n]|o(?:$|[^n\n]|n(?:$|[^ \n]))))))))))))))))))))[^\n]*))*\n?\z

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

! Configure VRRP with the appropriate password. router vrrp interface {interface} address-family ipv4 vrrp {virtual_router_id} text-authentication {password}

Svojstva

Operativni sistemi: Bilo koji
Oznake: cisco-iosxrnetworkaaa
Referenca: CIS Cisco IOS XR 7.x Benchmark v1.0.1 - 2.3.1 Authentication

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target cisco-iosxr --level 2