Detections
Analytics
CISC-RT-000940 - The Cisco Multicast Source Discovery Protocol (MSDP) switch must be configured to limit the amount of source-active messages it accepts on a per-peer basis.
Information
To reduce any risk of a denial-of-service (DoS) attack from a rogue or misconfigured MSDP switch, the switch must be configured to limit the number of source-active messages it accepts from each peer.Solution
Configure the switch to limit the amount of source-active messages it accepts from each peer.SW1(config)# ip msdp sa-limit x.1.28.2 nnn
SW1(config)# end
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Cisco_NX-OS_Switch_Y26M04_STIG.zip
Item Details
Audit Name: DISA Cisco NX OS Switch RTR STIG v3r4
Category: ACCESS CONTROL
References: 800-53|AC-4, CAT|III, CCI|CCI-001368, Rule-ID|SV-221146r1137903_rule, STIG-ID|CISC-RT-000940, STIG-Legacy|SV-111259, STIG-Legacy|V-102303, Vuln-ID|V-221146
Plugin: Cisco
Control ID: b023b9de57b15d9696353a9a72ca076ed379ba25fec0ac1523bb5a505ed42c8c