Ensure CSNP authentication check is not set to suppressed

YüksekDüzey 1Otomatikjuniper-junos

Açıklama

IS-IS Neighbors should be authenticated. Where it is deployed, IS-IS routing is vital for normal operation of an organization's network infrastructure. Correct route information is required for routers to correctly direct traffic through the network. Audited against the output of 'show configuration | display set | no-more' (set format, not the curly-brace hierarchy).

Nasıl denetlenir

Denetim yöntemi: Yapılandırma deseni

Desen: (?m)^set protocols isis [^\n]*\bno-csnp-authentication\b

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

! If you have deployed IS-IS in your network and have disabled CSNP authentication checking, re-enable it by issuing the following command from the hierarchy for each level at which it was set: delete protocols isis level <level> no-csnp-authentication

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: juniper-junosnetworkaaa
Referans: CIS Juniper OS Benchmark v2.1.0 - 4.2.7 Ensure CSNP authentication check is not set to suppressed

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target juniper-junos