Detections
Analytics

2.1.1 Do not allow remote login without a password

Information

The default switch configuration allows usernames that are not password-protected to log in only from the console. It is possible to configure the switch to allow unprotected usernames to log in from any port.

Allowing remote access to accounts without passwords is a severe security risk.

Solution

Reset the feature to the default value

#default aaa authentication policy local allow-nopassword-remote-login

See Also

https://workbench.cisecurity.org/benchmarks/25683

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-2

Plugin: Arista

Control ID: af9eaae989e3e01a2d5e5bfdb8ceed9ece4bb42dcaa547e9487a6c0eeb38a1b0