The router must enforce IP source routing is disabled.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000195-RTR-000084	SRG-NET-000195-RTR-000084	SRG-NET-000195-RTR-000084_rule		Low

Description
Source routing is a feature of IP, whereby individual packets can specify routes. This feature is used in several different network attacks by bypassing perimeter and internal defense mechanisms.

STIG	Date
Router Security Requirements Guide	2013-07-30

Details

Check Text ( C-SRG-NET-000195-RTR-000084_chk )
Review the configuration to determine if source routing is enabled. If source routing is enabled, this is a finding.

Fix Text (F-SRG-NET-000195-RTR-000084_fix)
Configure the router to disable IP source routing.