2.1.3 Set 'no ip bootp server'

Information

Disable the Bootstrap Protocol (BOOTP) service on your routing device.

Rationale:

BootP allows a router to issue IP addresses. This should be disabled unless there is a specific requirement.

Impact:

To reduce the risk of unauthorized access, organizations should implement a security policy restricting network protocols and explicitly require disabling all insecure or unnecessary protocols such as 'ip bootp server'.

Solution

Disable the bootp server.

hostname(config)#ip dhcp bootp ignore

Default Value:

Enabled

See Also

https://workbench.cisecurity.org/files/3829

Item Details

Category: ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|AC-18, 800-53|SC-23, CSCv7|9.2

Plugin: Cisco

Control ID: b5d696bae08ff2ab52271cc0ee3953f5eef40ebb57464d6da413cd5657b84538