Home
Security Hardening
DISA STIG Juniper Router RTR V2R2

DISA STIG Juniper Router RTR V2R2

JUNI-RT-000010 – The Juniper router must be configured to enforce approved authorizations for controlling the flow of information within the network based on organization-defined information flow control policies.
Details Information flow control regulates where information is allowed to travel within a network and between interconnected networks. The flow...
JUNI-RT-000020 – The Juniper router must be configured to implement message authentication for all control plane protocols – BGP
Details A rogue router could send a fictitious routing update to convince a site’s perimeter router to send traffic to...
JUNI-RT-000020 – The Juniper router must be configured to implement message authentication for all control plane protocols – IS-IS key
Details A rogue router could send a fictitious routing update to convince a site’s perimeter router to send traffic to...
JUNI-RT-000020 – The Juniper router must be configured to implement message authentication for all control plane protocols – IS-IS type
Details A rogue router could send a fictitious routing update to convince a site’s perimeter router to send traffic to...
JUNI-RT-000020 – The Juniper router must be configured to implement message authentication for all control plane protocols – LDP
Details A rogue router could send a fictitious routing update to convince a site’s perimeter router to send traffic to...
JUNI-RT-000020 – The Juniper router must be configured to implement message authentication for all control plane protocols – OSPF
Details A rogue router could send a fictitious routing update to convince a site’s perimeter router to send traffic to...
JUNI-RT-000020 – The Juniper router must be configured to implement message authentication for all control plane protocols – RIP key
Details A rogue router could send a fictitious routing update to convince a site’s perimeter router to send traffic to...
JUNI-RT-000020 – The Juniper router must be configured to implement message authentication for all control plane protocols – RIP type
Details A rogue router could send a fictitious routing update to convince a site’s perimeter router to send traffic to...
JUNI-RT-000030 – The Juniper router must be configured to use keys with a duration not exceeding 180 days for authenticating routing protocol messages.
Details If the keys used for routing protocol authentication are guessed, the malicious user could create havoc within the network...
JUNI-RT-000040 – The Juniper router must be configured to use encryption for routing protocol authentication – BGP
Details A rogue router could send a fictitious routing update to convince a site’s perimeter router to send traffic to...

DISA STIG Juniper Router RTR V2R2

JUNI-RT-000010 – The Juniper router must be configured to enforce approved authorizations for controlling the flow of information within the network based on organization-defined information flow control policies.

JUNI-RT-000020 – The Juniper router must be configured to implement message authentication for all control plane protocols – BGP

JUNI-RT-000020 – The Juniper router must be configured to implement message authentication for all control plane protocols – IS-IS key

JUNI-RT-000020 – The Juniper router must be configured to implement message authentication for all control plane protocols – IS-IS type

JUNI-RT-000020 – The Juniper router must be configured to implement message authentication for all control plane protocols – LDP

JUNI-RT-000020 – The Juniper router must be configured to implement message authentication for all control plane protocols – OSPF

JUNI-RT-000020 – The Juniper router must be configured to implement message authentication for all control plane protocols – RIP key

JUNI-RT-000020 – The Juniper router must be configured to implement message authentication for all control plane protocols – RIP type

JUNI-RT-000030 – The Juniper router must be configured to use keys with a duration not exceeding 180 days for authenticating routing protocol messages.

JUNI-RT-000040 – The Juniper router must be configured to use encryption for routing protocol authentication – BGP