Detections
Analytics
3.3.2.1 Set 'authentication message-digest' for OSPF area
Information
Enable MD5 authentication for OSPF.This is part of the OSPF authentication setup.
Solution
Configure the Message Digest option for OSPF.hostname(config)#router ospf <ospf_process-id>
hostname(config-router)#area <ospf_area-id> authentication message-digest
Impact:
Organizations should plan and implement enterprise security policies that require rigorous authentication methods for routing protocols. Configuring the area 'authentication message-digest' for OSPF enforces these policies by restricting exchanges between network devices.
See Also
Item Details
Audit Name: CIS Cisco IOS XE 17.x v2.2.1 L1
Category: ACCESS CONTROL, SECURITY ASSESSMENT AND AUTHORIZATION, CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|AC-18, 800-53|AC-18(1), 800-53|AC-18(3), 800-53|CA-9, 800-53|CM-2, 800-53|CM-6, 800-53|CM-7, 800-53|CM-7(1), 800-53|CM-9, 800-53|SC-7, 800-53|SC-7(5), CSCv7|9.2
Plugin: Cisco
Control ID: 6086d34bce50210fcd9c8956a7ed91ab6caaf737d67dbdbde4c32eb43c9b6444