The router must have Bootp service disabled.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-3086	NET0750	SV-3086r2_rule	ECSD-1	Low

Description
Bootp is a user datagram protocol (UDP) that can be used by Cisco routers to access copies of Cisco IOS Software on another Cisco router running the Bootp service. In this scenario, one Cisco router acts as a Cisco IOS Software server that can download the software to other Cisco routers acting as Bootp clients. In reality, this service is rarely used and can allow an attacker to download a copy of a router’s Cisco IOS Software.

Description

Bootp is a user datagram protocol (UDP) that can be used by Cisco routers to access copies of Cisco IOS Software on another Cisco router running the Bootp service. In this scenario, one Cisco router acts as a Cisco IOS Software server that can download the software to other Cisco routers acting as Bootp clients. In reality, this service is rarely used and can allow an attacker to download a copy of a router’s Cisco IOS Software.

STIG	Date
Infrastructure L3 Switch Secure Technical Implementation Guide - Cisco	2013-10-08

Details

Check Text ( C-3573r4_chk )
Review the router configuration to verify the IOS command "no ip bootp server" is present.

Fix Text (F-3111r5_fix)
Change the configuration to include the IOS command "no ip bootp server".