Authentication (VRRP)

YüksekDüzey 2Otomatikcisco-iosxr

Açıklama

You can ensure that VRRP messages received from VRRP routers that comprise a virtual router are authenticated by configuring a simple text password. This is part of the VRRP authentication setup. Passes when VRRP is not configured. Audited against the hierarchical output of 'show running-config' (run 'terminal length 0' first; not 'show running-config formal').

Nasıl denetlenir

Denetim yöntemi: Yapılandırma deseni

Desen: (?m)\A(?:[ \t]*(?:$|[^at \t\n]|a(?:$|[^u\n]|u(?:$|[^t\n]|t(?:$|[^h\n]|h(?:$|[^e\n]|e(?:$|[^n\n]|n(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^c\n]|c(?:$|[^a\n]|a(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^o\n]|o(?:$|[^n\n]|n(?:$|[^ \n]))))))))))))))|t(?:$|[^e\n]|e(?:$|[^x\n]|x(?:$|[^t\n]|t(?:$|[^\-\n]|-(?:$|[^a\n]|a(?:$|[^u\n]|u(?:$|[^t\n]|t(?:$|[^h\n]|h(?:$|[^e\n]|e(?:$|[^n\n]|n(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^c\n]|c(?:$|[^a\n]|a(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^o\n]|o(?:$|[^n\n]|n(?:$|[^ \n]))))))))))))))))))))[^\n]*\n)*[ \t]*router vrrp[^\n]*(?:\n(?:[ \t]*(?:$|[^at \t\n]|a(?:$|[^u\n]|u(?:$|[^t\n]|t(?:$|[^h\n]|h(?:$|[^e\n]|e(?:$|[^n\n]|n(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^c\n]|c(?:$|[^a\n]|a(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^o\n]|o(?:$|[^n\n]|n(?:$|[^ \n]))))))))))))))|t(?:$|[^e\n]|e(?:$|[^x\n]|x(?:$|[^t\n]|t(?:$|[^\-\n]|-(?:$|[^a\n]|a(?:$|[^u\n]|u(?:$|[^t\n]|t(?:$|[^h\n]|h(?:$|[^e\n]|e(?:$|[^n\n]|n(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^c\n]|c(?:$|[^a\n]|a(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^o\n]|o(?:$|[^n\n]|n(?:$|[^ \n]))))))))))))))))))))[^\n]*))*\n?\z

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

! Configure VRRP with the appropriate password. router vrrp interface {interface} address-family ipv4 vrrp {virtual_router_id} text-authentication {password}

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: cisco-iosxrnetworkaaa
Referans: CIS Cisco IOS XR 7.x Benchmark v1.0.1 - 2.3.1 Authentication

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target cisco-iosxr --level 2