Detections
Analytics
3.2 Authentication and Verification of ISIS Routing Protocols - authentication-type hmac-md5/authentication-keychain
Information
To improve network security, the ISIS routing algorithm should support MD5 or/and Keychain authenticationNOTE: Either authentication is null and/or authentication has not been configured.
Solution
Enable MD5 or/and Keychain authentication.Enable MD5 authentication:
ZXR10 (config-isis-100-if-fei-0/1/0/8.1)#authentication-type hmac-md5
ZXR10 (config-isis-100-if-fei-0/1/0/8.1)#authentication kkk
ZXR10 (config-isis-100)#authentication-type hmac-md5
ZXR10 (config-isis-100)#authentication ffff
Enable Keychain authentication:
ZXR10 (config)#router isis 100
ZXR10 (config-isis-100)#area 01
ZXR10 (config-isis-100)#system-id 0008.0008.0008
ZXR10 (config-isis-100)#authentication-keychain 123
ZXR10 (config-isis-100)#interface gei-0/1/0/7
ZXR10 (config-isis-100-if-gei-0/1/0/7)#ip router isis
ZXR10 (config-isis-100-if-gei-0/1/0/7)#circuit-type level-1
ZXR10 (config-isis-100-if-gei-0/1/0/7)#hello-authentication-keychain 123
See Also
Item Details
Audit Name: Tenable ZTE ROSNG Best Practices
Plugin: ZTE_ROSNG
Control ID: 8139033bd6bf5352b73757820a15b91d62434f13d56b91f21e2ae67b4464fb4a