Details

This command disables the exchange of capabilities. When command is enabled and after the peering is flapped, any new capabilities are not negotiated and will strictly support IPv4 routing exchanges with that peer. The no form of the command removes this command from the configuration and restores the normal behavior. This is beneficial in Internet peering environment when only address-family exchanged is IPv4.

NOTE: Nessus has determined that BGP is disabled.

Solution

Run the following command on the device to disable capability negotiation: configure router bgp group disable-capability-negotiation

Supportive Information

The following resource is also helpful.

• https://infoproducts.alcatel-lucent.com/aces/cgi-bin/dbaccessfilename.cgi/9305050101_V1_SR-OS Security Best Practices v2.0.pdfhttps://infoproducts.alcatel-lucent.com/aces/cgi-bin/dbaccessfilename.cgi/9305050101_V1_SR-OS Security Best Practices v2.0.pdf

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Alcatel.

References

• 800-53|SC-7

Source

• Tenable.com/audits