Home
Security Hardening
DISA STIG Cisco NX OS Switch RTR V2R1

DISA STIG Cisco NX OS Switch RTR V2R1

CISC-RT-000010 – The Cisco switch must be configured to enforce approved authorizations for controlling the flow of information within the network based on organization-defined information flow control policies.
Details Information flow control regulates where information is allowed to travel within a network and between interconnected networks. The flow...
CISC-RT-000020 – The Cisco switch must be configured to implement message authentication for all control plane protocols – bgp
Details A rogue switch could send a fictitious routing update to convince a site’s perimeter switch to send traffic to...
CISC-RT-000020 – The Cisco switch must be configured to implement message authentication for all control plane protocols – eigrp
Details A rogue switch could send a fictitious routing update to convince a site’s perimeter switch to send traffic to...
CISC-RT-000020 – The Cisco switch must be configured to implement message authentication for all control plane protocols – is-is
Details A rogue switch could send a fictitious routing update to convince a site’s perimeter switch to send traffic to...
CISC-RT-000020 – The Cisco switch must be configured to implement message authentication for all control plane protocols – ospf
Details A rogue switch could send a fictitious routing update to convince a site’s perimeter switch to send traffic to...
CISC-RT-000020 – The Cisco switch must be configured to implement message authentication for all control plane protocols – rip
Details A rogue switch could send a fictitious routing update to convince a site’s perimeter switch to send traffic to...
CISC-RT-000030 – The Cisco switch must be configured to use keys with a duration not exceeding 180 days for authenticating routing protocol messages.
Details If the keys used for routing protocol authentication are guessed, the malicious user could create havoc within the network...
CISC-RT-000040 – The Cisco switch must be configured to use encryption for routing protocol authentication – bgp
Details A rogue switch could send a fictitious routing update to convince a site’s perimeter switch to send traffic to...
CISC-RT-000040 – The Cisco switch must be configured to use encryption for routing protocol authentication – eigrp
Details A rogue switch could send a fictitious routing update to convince a site’s perimeter switch to send traffic to...
CISC-RT-000040 – The Cisco switch must be configured to use encryption for routing protocol authentication – is-is
Details A rogue switch could send a fictitious routing update to convince a site’s perimeter switch to send traffic to...

DISA STIG Cisco NX OS Switch RTR V2R1

CISC-RT-000010 – The Cisco switch must be configured to enforce approved authorizations for controlling the flow of information within the network based on organization-defined information flow control policies.

CISC-RT-000020 – The Cisco switch must be configured to implement message authentication for all control plane protocols – bgp

CISC-RT-000020 – The Cisco switch must be configured to implement message authentication for all control plane protocols – eigrp

CISC-RT-000020 – The Cisco switch must be configured to implement message authentication for all control plane protocols – is-is

CISC-RT-000020 – The Cisco switch must be configured to implement message authentication for all control plane protocols – ospf

CISC-RT-000020 – The Cisco switch must be configured to implement message authentication for all control plane protocols – rip

CISC-RT-000030 – The Cisco switch must be configured to use keys with a duration not exceeding 180 days for authenticating routing protocol messages.

CISC-RT-000040 – The Cisco switch must be configured to use encryption for routing protocol authentication – bgp

CISC-RT-000040 – The Cisco switch must be configured to use encryption for routing protocol authentication – eigrp

CISC-RT-000040 – The Cisco switch must be configured to use encryption for routing protocol authentication – is-is