Detections
Analytics

1.87 CISC-RT-000940

Information

The Cisco Multicast Source Discovery Protocol (MSDP) switch must be configured to limit the amount of source-active messages it accepts on a per-peer basis.

GROUP ID: V-221068
RULE ID: SV-221068r622190

To reduce any risk of a denial-of-service (DoS) attack from a rogue or misconfigured MSDP switch, the switch must be configured to limit the number of source-active messages it accepts from each peer.

Solution

Configure the switch to limit the amount of source-active messages it accepts from each peer.

SW1(config)#ip msdp sa-limit x.1.28.2 nnn

See Also

https://workbench.cisecurity.org/benchmarks/26260

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-4, CAT|III, CCI|CCI-001368, Rule-ID|SV-221068r622190_rule, STIG-ID|CISC-RT-000940, Vuln-ID|V-221068

Plugin: Cisco

Control ID: f2ce4c2cd80ede31ce2653676d4e9b40a94f9336bfc8c5b3027e4856b00f5f4a