Skip to content

The HP FlexFabric Switch must have a local account that will only be used as an account of last resort with full access to the network device.

An XCCDF Rule

Description

In the event the network device loses connectivity to the management network authentication service, only a local account can gain access to the switch to perform configuration and maintenance. Without this capability, the network device is inaccessible to administrators.

ID
SV-80785r1_rule
Version
HFFS-ND-000140
Severity
High
References
Updated

Remediation Templates

A Manual Procedure

Configure the switch with a local user account that has network-admin and network-operator role.
[5900]local-user adminxxx
[5900-luser-manage-adminxxx]authorization-attribute  user-role network-admin   (or level=15)
[5900-luser-manage-adminxxx]authorization-attribute  user-role network-operator
[5900-luser-manage-adminxxx]service-type terminal
[5900-luser-manage-adminxxx]password hash xxxxxxxxxxxxxx