1. Home
  2. Security Hardening
  3. DISA STIG Cisco IOS XE Switch RTR V2R1
  4. CISC-RT-000190 – The Cisco switch must be configured to have Internet Control Message Protocol (ICMP) redirect messages disabled on all external interfaces.
Searching...

CISC-RT-000190 – The Cisco switch must be configured to have Internet Control Message Protocol (ICMP) redirect messages disabled on all external interfaces.

Details

The ICMP supports IP traffic by relaying information about paths, routes, and network conditions. Switches automatically send ICMP messages under a wide variety of conditions. Redirect ICMP messages are commonly used by attackers for network mapping and diagnosis.

Solution

Disable ICMP redirects on all external interfaces as shown in the example below:

SW1(config)#int g0/1
SW1(config-if)#no ip redirects

Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Cisco.

References

Source

Updated on July 16, 2022
Was this article helpful?
Yes No

Related Articles