TACACS Server Configuration

YüksekDüzey 2Otomatikaruba-cx

Açıklama

TACACS+ is a centralized authentication, authorization, and accounting protocol that provides granular control over user access and command-level authorization for AOS- CX switches. It separates authentication, authorization, and accounting processes for enhanced flexibility. PASS requires a TACACS+ server host and an aaa tacacs server group. Audited against AOS-CX 'show running-config' output (saved in full); context blocks such as 'password complexity' or 'cli-session' are matched by their indented member lines.

Nasıl denetlenir

Denetim yöntemi: Yapılandırma deseni

Desen: (?m)(?:^tacacs-server host \S+(?s:.*?)^aaa group server tacacs \S+|^aaa group server tacacs \S+(?s:.*?)^tacacs-server host \S+)

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

tacacs-server host 10.0.0.31 key plaintext <key> vrf mgmt aaa group server tacacs tacacs1 server 10.0.0.31 vrf mgmt # CIS guidance: To Configure TACACS+ Server - tacacs-server host {<FQDN> | <IPV4> | <IPV6>} [key [plaintext <PASSKEY> | ciphertext <PASSKEY>]] [vrf <VRF-NAME>] To Associate TACACS+ Server to the group - aaa group server tacacs <group-name> server <FQDN | IPv4 | IPv6> vrf <vrf> exit

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: aruba-cxauthentication
Referans: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.5.1.2 TACACS Server Configuration

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target aruba-cx --level 2