Authentication (VRRP)

CaoCấp 2Tự độngcisco-iosxr

Mô tả

You can ensure that VRRP messages received from VRRP routers that comprise a virtual router are authenticated by configuring a simple text password. This is part of the VRRP authentication setup. Passes when VRRP is not configured. Audited against the hierarchical output of 'show running-config' (run 'terminal length 0' first; not 'show running-config formal').

Cách kiểm tra

Phương pháp kiểm tra: Mẫu cấu hình

Mẫu khớp: (?m)\A(?:[ \t]*(?:$|[^at \t\n]|a(?:$|[^u\n]|u(?:$|[^t\n]|t(?:$|[^h\n]|h(?:$|[^e\n]|e(?:$|[^n\n]|n(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^c\n]|c(?:$|[^a\n]|a(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^o\n]|o(?:$|[^n\n]|n(?:$|[^ \n]))))))))))))))|t(?:$|[^e\n]|e(?:$|[^x\n]|x(?:$|[^t\n]|t(?:$|[^\-\n]|-(?:$|[^a\n]|a(?:$|[^u\n]|u(?:$|[^t\n]|t(?:$|[^h\n]|h(?:$|[^e\n]|e(?:$|[^n\n]|n(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^c\n]|c(?:$|[^a\n]|a(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^o\n]|o(?:$|[^n\n]|n(?:$|[^ \n]))))))))))))))))))))[^\n]*\n)*[ \t]*router vrrp[^\n]*(?:\n(?:[ \t]*(?:$|[^at \t\n]|a(?:$|[^u\n]|u(?:$|[^t\n]|t(?:$|[^h\n]|h(?:$|[^e\n]|e(?:$|[^n\n]|n(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^c\n]|c(?:$|[^a\n]|a(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^o\n]|o(?:$|[^n\n]|n(?:$|[^ \n]))))))))))))))|t(?:$|[^e\n]|e(?:$|[^x\n]|x(?:$|[^t\n]|t(?:$|[^\-\n]|-(?:$|[^a\n]|a(?:$|[^u\n]|u(?:$|[^t\n]|t(?:$|[^h\n]|h(?:$|[^e\n]|e(?:$|[^n\n]|n(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^c\n]|c(?:$|[^a\n]|a(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^o\n]|o(?:$|[^n\n]|n(?:$|[^ \n]))))))))))))))))))))[^\n]*))*\n?\z

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

! Configure VRRP with the appropriate password. router vrrp interface {interface} address-family ipv4 vrrp {virtual_router_id} text-authentication {password}

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: cisco-iosxrnetworkaaa
Tham chiếu: CIS Cisco IOS XR 7.x Benchmark v1.0.1 - 2.3.1 Authentication

Kiểm tra máy này

Chạy lệnh này trên máy bạn được phép kiểm tra. Lần quét chỉ ở chế độ đọc.

shell

tmaegis scan --target cisco-iosxr --level 2