Details

AAA authentication is an AAA service that helps verify user logins, user access to the Enable mode, and

port usage. Authentication works by verifying user credentials with those stored on a server. In AOS, AAA

authentication can verify a user’s permission to access Enable mode by using the

aaa authentication enable default command to create the default method list that monitors user permissions.

Solution

Run the following command to enable aaa authentication :

aaa accounting exec default start-stop group
aaa accounting exec default start-stop group tacacs+
aaa accounting exec default stop-only group
aaa accounting exec default stop-only group tacacs+

aaa accounting exec start-stop group
aaa accounting exec start-stop group tacacs+
aaa accounting exec stop-only group
aaa accounting exec stop-only group tacacs+

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Adtran.

References

• 800-53|AC-6(3)

Source

• Tenable.com/audits