Detections
Analytics
CISC-RT-000940 - The Cisco Multicast Source Discovery Protocol (MSDP) switch must be configured to limit the amount of source-active messages it accepts on a per-peer basis.
Information
To reduce any risk of a denial-of-service (DoS) attack from a rogue or misconfigured MSDP switch, the switch must be configured to limit the number of source-active messages it accepts from each peer.Solution
Configure the switch to limit the amount of source-active messages it accepts from each peer.SW1(config)#ip msdp sa-limit x.1.28.2 nnn
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Cisco_IOS-XE_Switch_Y26M04_STIG.zip
Item Details
Audit Name: DISA Cisco IOS XE Switch RTR STIG v3r4
Category: ACCESS CONTROL
References: 800-53|AC-4, CAT|III, CCI|CCI-001368, Rule-ID|SV-221068r1137903_rule, STIG-ID|CISC-RT-000940, STIG-Legacy|SV-110957, STIG-Legacy|V-101853, Vuln-ID|V-221068
Plugin: Cisco
Control ID: 47bb69f37d32422b45859b3e4f1a53000de039cdb56dc015e6dd83dad41c4a4a