Home
Security Hardening
DISA STIG Cisco IOS Router RTR V2R1

DISA STIG Cisco IOS Router RTR V2R1

CISC-RT-000010 – The Cisco router must be configured to enforce approved authorizations for controlling the flow of information within the network based on organization-defined information flow control policies – ip access-group
Details Information flow control regulates where information is allowed to travel within a network and between interconnected networks. The flow...
CISC-RT-000010 – The Cisco router must be configured to enforce approved authorizations for controlling the flow of information within the network based on organization-defined information flow control policies – ip access-list extended
Details Information flow control regulates where information is allowed to travel within a network and between interconnected networks. The flow...
CISC-RT-000020 – The Cisco router must be configured to implement message authentication for all control plane protocols – BGP
Details A rogue router could send a fictitious routing update to convince a site’s perimeter router to send traffic to...
CISC-RT-000020 – The Cisco router must be configured to implement message authentication for all control plane protocols – EIGRP
Details A rogue router could send a fictitious routing update to convince a site’s perimeter router to send traffic to...
CISC-RT-000020 – The Cisco router must be configured to implement message authentication for all control plane protocols – IS-IS
Details A rogue router could send a fictitious routing update to convince a site’s perimeter router to send traffic to...
CISC-RT-000020 – The Cisco router must be configured to implement message authentication for all control plane protocols – OSPF
Details A rogue router could send a fictitious routing update to convince a site’s perimeter router to send traffic to...
CISC-RT-000030 – The Cisco router must be configured to use keys with a duration not exceeding 180 days for authenticating routing protocol messages.
Details If the keys used for routing protocol authentication are guessed, the malicious user could create havoc within the network...
CISC-RT-000040 – The Cisco router must be configured to use encryption for routing protocol authentication – BGP
Details A rogue router could send a fictitious routing update to convince a site’s perimeter router to send traffic to...
CISC-RT-000040 – The Cisco router must be configured to use encryption for routing protocol authentication – EIGRP
Details A rogue router could send a fictitious routing update to convince a site’s perimeter router to send traffic to...
CISC-RT-000040 – The Cisco router must be configured to use encryption for routing protocol authentication – IS-IS
Details A rogue router could send a fictitious routing update to convince a site’s perimeter router to send traffic to...

DISA STIG Cisco IOS Router RTR V2R1

CISC-RT-000010 – The Cisco router must be configured to enforce approved authorizations for controlling the flow of information within the network based on organization-defined information flow control policies – ip access-group

CISC-RT-000010 – The Cisco router must be configured to enforce approved authorizations for controlling the flow of information within the network based on organization-defined information flow control policies – ip access-list extended

CISC-RT-000020 – The Cisco router must be configured to implement message authentication for all control plane protocols – BGP

CISC-RT-000020 – The Cisco router must be configured to implement message authentication for all control plane protocols – EIGRP

CISC-RT-000020 – The Cisco router must be configured to implement message authentication for all control plane protocols – IS-IS

CISC-RT-000020 – The Cisco router must be configured to implement message authentication for all control plane protocols – OSPF

CISC-RT-000030 – The Cisco router must be configured to use keys with a duration not exceeding 180 days for authenticating routing protocol messages.

CISC-RT-000040 – The Cisco router must be configured to use encryption for routing protocol authentication – BGP

CISC-RT-000040 – The Cisco router must be configured to use encryption for routing protocol authentication – EIGRP

CISC-RT-000040 – The Cisco router must be configured to use encryption for routing protocol authentication – IS-IS