The network element’s emergency account must be set to an appropriate authorization level to perform necessary administrative functions when the authentication server is not online.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-15434	NET0441	SV-16261r2_rule	ECSC-1	High

Description
The emergency account is to be configured as a local account on the network element. It is to be used only when the authentication server is offline or not reachable via the network. The emergency account must be set to an appropriate authorization level to perform necessary administrative functions during this time.

STIG	Date
Infrastructure L3 Switch Secure Technical Implementation Guide - Cisco	2013-10-08

Details

Check Text ( C-14441r3_chk )
Review the emergency account configured on the network element and verify that it has been assigned to a privilege level that will enable the administrator to perform necessary administrative functions when the authentication server is not online.

Fix Text (F-15098r6_fix)
Assign a privilege level to the emergency account to allow the administrator to perform necessary administrative functions when the authentication server is not online.