From Riverbed SteelHead CX v8 NDM Security Technical Implementation Guide
Part of SRG-APP-000516-NDM-000336
Associated with: CCI-000366 CCI-000370
The use of authentication servers or other centralized management servers for providing centralized authentication services is required for network device management. Maintaining local administrator accounts for daily usage on each network device without centralized management is not scalable or feasible. Without centralized management, it is likely that credentials for some network devices will be forgotten, leading to delays in administration, which itself leads to delays in remediating production problems and in addressing compromises in a timely fashion.
Verify that RiOS is configured to employ automated mechanisms to centrally manage authentication settings. Navigate to the device Management Console Navigate to Configure >> Security >> TACACS+ Verify that "TACACS+ Servers" has at least one server defined -- or -- Navigate to Configure >> Security >> RADIUS Verify that "RADIUS Servers" has at least one server defined If no servers exist in "TACACS+ Servers" or "RADIUS Servers", this is a finding.
Configure RiOS to employ automated mechanisms to centrally manage authentication settings. Navigate to the device Management Console Navigate to Configure >> Security >> TACACS+ Click "Add a TACACS+ Server" Set "Hostname or IP Address" to the hostname or IP address of the TACACS+ server Set "Enabled" Click "Add" Click "Set a Global Default Key" Set the value of "Global Key" to the required value Set the value of "Confirm Global Key" to the required value Click "Apply" Navigate to the top of the web page and click "Save" to save these settings permanently -- or -- Navigate to Configure >> Security >> RADIUS Click "Add a RADIUS Server" Set "Hostname or IP Address" to the hostname or IP address of the RADIUS server Set the value of "Authentication Port" to the appropriate value Set the value of "Authentication Type" to "CHAP" Set "Enabled" Click "Add" Click "Set a Global Default Key" Set the value of "Global Key" to the required value Set the value of "Confirm Global Key" to the required value Click "Apply" Navigate to the top of the web page and click "Save" to save these settings permanently
Lavender hyperlinks in small type off to the right (of CSS
class id, if you view the page source) point to
globally unique URIs for each document and item. Copy the
link location and paste anywhere you need to talk
unambiguously about these things.
You can obtain data about documents and items in other
formats. Simply provide an HTTP header Accept:
text/turtle or
Accept: application/rdf+xml.
Powered by sagemincer