Detections
Analytics
CISC-RT-000940 - The Cisco Multicast Source Discovery Protocol (MSDP) router must be configured to limit the amount of source-active messages it accepts on a per-peer basis.
Information
To reduce any risk of a denial of service (DoS) attack from a rogue or misconfigured MSDP router, the router must be configured to limit the number of source-active messages it accepts from each peer.Solution
Configure the router to limit the amount of source-active messages it accepts from each peer.R8(config)#ip msdp sa-limit x.1.28.2 nnn
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Cisco_IOS-XE_Router_Y26M01_STIG.zip
Item Details
Audit Name: DISA Cisco IOS XE Router RTR STIG v3r5
Category: ACCESS CONTROL
References: 800-53|AC-4, CAT|III, CCI|CCI-001368, Rule-ID|SV-216732r1117236_rule, STIG-ID|CISC-RT-000940, STIG-Legacy|SV-106175, STIG-Legacy|V-97037, Vuln-ID|V-216732
Plugin: Cisco
Control ID: 6be51bdf79ec78a68170d12b9c987560d11ce2ebeb7ec89f86e11465d3fde686