Detections
Analytics
CISC-RT-000940 - The Cisco Multicast Source Discovery Protocol (MSDP) router must be configured to limit the amount of source-active messages it accepts on a per-peer basis.
Information
To reduce any risk of a denial-of-service (DoS) attack from a rogue or misconfigured MSDP router, the router must be configured to limit the number of source-active messages it accepts from each peer.Solution
Configure the router to limit the amount of source-active messages it accepts from each peer.R8(config)#ip msdp sa-limit x.1.28.2 nnn
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Cisco_IOS_Router_Y26M04_STIG.zip
Item Details
Audit Name: DISA Cisco IOS Router RTR STIG v3r4
Category: ACCESS CONTROL
References: 800-53|AC-4, CAT|III, CCI|CCI-001368, Rule-ID|SV-216637r1117236_rule, STIG-ID|CISC-RT-000940, STIG-Legacy|SV-105811, STIG-Legacy|V-96673, Vuln-ID|V-216637
Plugin: Cisco
Control ID: 2857b41898b9a7ded2fb31da783c5d902645f6ff0375b12f4815ed6b206731ff