Detections
Analytics

1.96 CISC-RT-000940

Information

The Cisco Multicast Source Discovery Protocol (MSDP) router must be configured to limit the amount of source-active messages it accepts on a per-peer basis.

GROUP ID: V-216732
RULE ID: SV-216732r531086

To reduce any risk of a denial of service (DoS) attack from a rogue or misconfigured MSDP router, the router must be configured to limit the number of source-active messages it accepts from each peer.

Solution

Configure the router to limit the amount of source-active messages it accepts from each peer.

R8(config)#ip msdp sa-limit x.1.28.2 nnn

See Also

https://workbench.cisecurity.org/benchmarks/26261

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-4, CAT|III, CCI|CCI-001368, Rule-ID|SV-216732r531086_rule, STIG-ID|CISC-RT-000940, Vuln-ID|V-216732

Plugin: Cisco

Control ID: 52cdc4f3a014535a505e1c372d3bb14513b41aafe05bbdee0d5e8e52048f7283