NET0400 – Interior routing protocols are not authenticated – ‘IS-IS (Interface Check – isis authentication mode)’
Details The network element must authenticate all IGP peers. A rogue router could send a fictitious routing update to convince...
- Home
- Security Hardening
- DISA STIG Cisco Infrastructure Router V8R29
DISA STIG Cisco Infrastructure Router V8R29
NET0400 – Interior routing protocols are not authenticated – ‘IS-IS (Key-Chain Check)’
Details The network element must authenticate all IGP peers. A rogue router could send a fictitious routing update to convince...NET0400 – Interior routing protocols are not authenticated – ‘IS-IS (Router Check – authentication key-chain)’
Details The network element must authenticate all IGP peers. A rogue router could send a fictitious routing update to convince...NET0400 – Interior routing protocols are not authenticated – ‘IS-IS (Router Check – authentication mode)’
Details The network element must authenticate all IGP peers. A rogue router could send a fictitious routing update to convince...NET0400 – Interior routing protocols are not authenticated – ‘OSPFv2 (Interface Check)’
Details The network element must authenticate all IGP peers. A rogue router could send a fictitious routing update to convince...NET0400 – Interior routing protocols are not authenticated – ‘OSPFv2 (Router Check)’
Details The network element must authenticate all IGP peers. A rogue router could send a fictitious routing update to convince...NET0400 – Interior routing protocols are not authenticated – ‘RIPv2 (Interface Check – authentication key-chain)’
Details The network element must authenticate all IGP peers. A rogue router could send a fictitious routing update to convince...NET0400 – Interior routing protocols are not authenticated – ‘RIPv2 (Interface Check – authentication mode)’
Details The network element must authenticate all IGP peers. A rogue router could send a fictitious routing update to convince...NET-IPV6-025 – IPv6 Site Local Unicast ADDR must not be defined
Details The network element must be configured to ensure IPv6 Site Local Unicast addresses are not defined in the enclave,...NET-IPV6-033 – IPv6 routers are not configured with CEF enabled
Details The administrator will enable CEF to improve router stability during a SYN flood attack in an IPv6 enclave. The...