Remote Authentication - RADIUS/RadSec/TACACS+

YüksekDüzey 2Otomatikaruba-cx

Açıklama

Remote Authentication involves the use of remote RADIUS , RadSec and TACACS+ servers for authenticating the management users. Remote AAA servers are used as single point of management to configure and store user accounts. They are often coupled with directories and management repositories, simplifying the setup and maintenance of the end-user accounts. PASS requires remote (RADIUS/RadSec/TACACS+) authentication for a management channel. Audited against AOS-CX 'show running-config' output (saved in full); context blocks such as 'password complexity' or 'cli-session' are matched by their indented member lines.

Nasıl denetlenir

Denetim yöntemi: Yapılandırma deseni

Desen: (?m)^aaa authentication login (?:default|console|ssh|telnet|https-server) group \S+

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

aaa authentication login default group tacacs1 local # CIS guidance: Enable remote authentication for desired management interface. Default – Includes all the management interfaces - aaa authentication login <console/default/ssh/telnet/https- <RADIUS/TACACS+ group-list>

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: aruba-cxauthentication
Referans: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.5.2.3 Remote Authentication - RADIUS/RadSec/TACACS+

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target aruba-cx --level 2