Authenticate OSPF peers with MD5 authentication keys

VisokaNivo 2Ručni pregledcisco-nxos

Opis

If OSPF is configured, peers can be authenticated using keys. This is not configured by default. If configured, MD5 hashes are recommended as the authentication mechanism. MD5 is the best option for multi-vendor support, and is also the best cryptographic option available in the OSPF standard. CIS assessment: Manual. Reported as SKIP with review instructions.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

CIS assessment: Manual. The "show running-configuration ospf" lists the entire OSPF configuration. For all interfaces that face peers, ensure that these two commands are in place: interface <interfacename> ip ospf authentication message-digest ip ospf authentication key-chain <OSPF Key-Chain name> Each OSPF routeable interface should either have authentication configured or be configured as an OSPF passive interface.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

! For each OSPF routeable interface, set the message-digest authentication method, and assign the appropriate keychain. Each OSPF routeable interface should either have authentication configured or be configured as an OSPF passive interface. interface Vlan1 ip ospf authentication message-digest ip ospf authentication key-chain <OSPF Key Chain>

Svojstva

Operativni sistemi: Bilo koji
Oznake: cisco-nxosnetworkaaa
Referenca: CIS Cisco NX-OS Benchmark v1.2.0 - 3.1.3.2 Authenticate OSPF peers with MD5 authentication keys