Home
Security Hardening
DISA STIG Arista MLS DCS 7000 Series RTR V1R3

DISA STIG Arista MLS DCS 7000 Series RTR V1R3

AMLS-L3-000100 – The Arista Multilayer Switch must enforce approved authorizations for controlling the flow of information between interconnected networks in accordance with applicable policy.
Details Information flow control regulates authorized information to travel within a network and between interconnected networks. Controlling the flow of...
AMLS-L3-000110 – The Arista Multilayer Switch must disable Protocol Independent Multicast (PIM) on all interfaces that are not required to support multicast routing.
Details If multicast traffic is forwarded beyond the intended boundary, it is possible that it can be intercepted by unauthorized...
AMLS-L3-000120 – The Arista Multilayer Switch must bind a Protocol Independent Multicast (PIM) neighbor filter to interfaces that have PIM enabled – PIM neighbor filter to interfaces that have PIM enabled.
Details Protocol Independent Multicast (PIM) is a routing protocol used to build multicast distribution trees for forwarding multicast traffic across...
AMLS-L3-000130 – The Arista Multilayer Switch must establish boundaries for IPv6 Admin-Local, IPv6 Site-Local, IPv6 Organization-Local scope, and IPv4 Local-Scope multicast traffic.
Details If multicast traffic is forwarded beyond the intended boundary, it is possible that it can be intercepted by unauthorized...
AMLS-L3-000140 – The Arista Multilayer Switch must be configured so inactive router interfaces are disabled.
Details An inactive interface is rarely monitored or controlled and may expose a network to an undetected attack on that...
AMLS-L3-000220 – The Arista Multilayer Switch must enable neighbor router authentication for control plane protocols except RIP – OSPF MD5 Key
Details A rogue router could send a fictitious routing update to convince a site’s perimeter router to send traffic to...
AMLS-L3-000220 – The Arista Multilayer Switch must enable neighbor router authentication for control plane protocols except RIP – OSPF message-digest
Details A rogue router could send a fictitious routing update to convince a site’s perimeter router to send traffic to...
AMLS-L3-000230 – The Arista Multilayer Switch must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding.
Details A compromised host in an enclave can be used by a malicious actor as a platform to launch cyber...
AMLS-L3-000240 – The Arista Multilayer Switch must be configured to disable non-essential capabilities.
Details A compromised router introduces risk to the entire network infrastructure as well as data resources that are accessible via...
AMLS-L3-000250 – The Arista Multilayer Switch must encrypt all methods of configured authentication for the OSPF routing protocol – ipv6 OSPF checks
Details A rogue router could send a fictitious routing update to convince a site’s perimeter router to send traffic to...

DISA STIG Arista MLS DCS 7000 Series RTR V1R3

AMLS-L3-000100 – The Arista Multilayer Switch must enforce approved authorizations for controlling the flow of information between interconnected networks in accordance with applicable policy.

AMLS-L3-000110 – The Arista Multilayer Switch must disable Protocol Independent Multicast (PIM) on all interfaces that are not required to support multicast routing.

AMLS-L3-000120 – The Arista Multilayer Switch must bind a Protocol Independent Multicast (PIM) neighbor filter to interfaces that have PIM enabled – PIM neighbor filter to interfaces that have PIM enabled.

AMLS-L3-000130 – The Arista Multilayer Switch must establish boundaries for IPv6 Admin-Local, IPv6 Site-Local, IPv6 Organization-Local scope, and IPv4 Local-Scope multicast traffic.

AMLS-L3-000140 – The Arista Multilayer Switch must be configured so inactive router interfaces are disabled.

AMLS-L3-000220 – The Arista Multilayer Switch must enable neighbor router authentication for control plane protocols except RIP – OSPF MD5 Key

AMLS-L3-000220 – The Arista Multilayer Switch must enable neighbor router authentication for control plane protocols except RIP – OSPF message-digest

AMLS-L3-000230 – The Arista Multilayer Switch must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding.

AMLS-L3-000240 – The Arista Multilayer Switch must be configured to disable non-essential capabilities.

AMLS-L3-000250 – The Arista Multilayer Switch must encrypt all methods of configured authentication for the OSPF routing protocol – ipv6 OSPF checks