Set password length for local credentials

YüksekDüzey 1Otomatikcisco-nxos

Açıklama

Password length should be set to some value that makes compromising any captured hashed difficult. This generally means that the maximum value of 127 should never be changed, and that the minimum value, which defaults to 8, should always be increased. Typical values for minimum passphrase length of administrative users are generally 20 characters or longer (values of 30 or 32 are often seen). Passwords are stored in a non-reversible, hashed and salted format. If an attacker should "harvest" a password hash, it is of course hashed in a non-reversible format -however, it can be decoded using dictionary and/or brute-force attacks using tools such as ... Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all', which adds default values).

Nasıl denetlenir

Denetim yöntemi: Yapılandırma deseni

Desen: (?m)^userpassphrase min-length \d+

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

! Passphrase length values can only be set globally, not per-local user userpassphrase min-length <minimum passphrase length> userpassphrase max-length <maximum passphrase length> or in a single command: userpassphrase min-length max-length example: userpassphrase min-length 20 userpassphrase max-length 127 Or in a single command: userpassphrase min-length 20 max-length 127

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: cisco-nxosnetworkaaa
Referans: CIS Cisco NX-OS Benchmark v1.2.0 - 1.4.4 Set password length for local credentials

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target cisco-nxos