TMA-CISCO-NXOS-3.1.3.2
Authenticate OSPF peers with MD5 authentication keys
Açıklama
If OSPF is configured, peers can be authenticated using keys. This is not configured by default. If configured, MD5 hashes are recommended as the authentication mechanism. MD5 is the best option for multi-vendor support, and is also the best cryptographic option available in the OSPF standard. CIS assessment: Manual. Reported as SKIP with review instructions.
Nasıl denetlenir
Denetim yöntemi: Manuel inceleme
Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.
CIS assessment: Manual. The "show running-configuration ospf" lists the entire OSPF configuration. For all interfaces that face peers, ensure that these two commands are in place: interface <interfacename> ip ospf authentication message-digest ip ospf authentication key-chain <OSPF Key-Chain name> Each OSPF routeable interface should either have authentication configured or be configured as an OSPF passive interface.
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
! For each OSPF routeable interface, set the message-digest authentication method, and assign the appropriate keychain. Each OSPF routeable interface should either have authentication configured or be configured as an OSPF passive interface. interface Vlan1 ip ospf authentication message-digest ip ospf authentication key-chain <OSPF Key Chain>
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- cisco-nxosnetworkaaa
- Referans
- CIS Cisco NX-OS Benchmark v1.2.0 - 3.1.3.2 Authenticate OSPF peers with MD5 authentication keys