Details

Enables the authentication of EIGRP neighbor before routing information is received from the neighbor

Rationale:

Enabling the routing protocol authentication prevents against attackers who can send wrong routing information in order to redirect traffic to their network or send malformed packets in order to saturate and to exhaust the control plane.

Solution

Step 1: Acquire the interface used by the firewall to receive EIGRP routing updates and the EIGRP Autonomous System number

Step 2: Agree with the neighbor device on the authencation key and determine an authentication key ID

Step 3: Run the following to enable RIP authentication

hostname(config)#interface
hostname(config-if)#authentication mode eigrp md5
hostname(config-if)#authentication key eigrp key-id

Default Value:

Disabled by default

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/3294https://workbench.cisecurity.org/files/3294

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Cisco.

References

• 800-53|CM-2
• CSCv7|11.1

Source

• Tenable.com/audits