IGP instances configured on the OOBM gateway router do not peer only with their appropriate routing domain.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-17815	NET0985	SV-19068r1_rule	ECSC-1	Medium

Description
If the gateway router is not a dedicated device for the OOBM network, several safeguards must be implemented for containment of management and production traffic boundaries. Since the managed network and the management network are separate routing domains, separate IGP routing instances must be configured on the router—one for the managed network and one for the OOBM network.

STIG	Date
Infrastructure Router Security Technical Implementation Guide	2017-09-28

Details

Check Text ( C-19232r1_chk )
Verify that the OOBM interface is an adjacency only in the IGP routing domain for the management network.

Fix Text (F-17730r1_fix)
Ensure that multiple IGP instances configured on the OOBM gateway router peer only with their appropriate routing domain. Verify that the all interfaces are configured for the appropriate IGP instance.