Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
IGP instances configured on the OOBM gateway router do not peer only with their appropriate routing domain.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-17815 | NET0985 | SV-19068r1_rule | ECSC-1 | Medium |
| Description |
|---|
| If the gateway router is not a dedicated device for the OOBM network, several safeguards must be implemented for containment of management and production traffic boundaries. Since the managed network and the management network are separate routing domains, separate IGP routing instances must be configured on the router—one for the managed network and one for the OOBM network. |
| STIG | Date |
|---|---|
| Infrastructure L3 Switch Security Technical Implementation Guide | 2018-03-02 |
Details
| Check Text ( C-19232r1_chk ) |
|---|
| Verify that the OOBM interface is an adjacency only in the IGP routing domain for the management network. |
| Fix Text (F-17730r1_fix) |
|---|
| Ensure that multiple IGP instances configured on the OOBM gateway router peer only with their appropriate routing domain. Verify that the all interfaces are configured for the appropriate IGP instance. |