Details

http://www.cisco.com/c/en/us/td/docs/ios/12_2/qos/configuration/guide/fqos_c/qcfpbr.html

Solution

The SA must carefully plan and configure or let IGP determine what goes into each tunnel.

Supportive Information

The following resource is also helpful.

• https://iasecontent.disa.mil/stigs/zip/U_Network_Infrastructure_Router_L3_Switch_V8R29_STIG.zip

This control applies to the following type of system Cisco.

References

• CAT|II
• Rule-ID|SV-20504r2_rule
• STIG-ID|NET-TUNL-012
• Vuln-ID|V-18790

Source

• Tenable.com/audits