Detections
Analytics
OS10-RTR-000180 - The perimeter router must be configured to not be a Border Gateway Protocol (BGP) peer to an alternate gateway service provider.
Information
ISPs use BGP to share route information with other autonomous systems (i.e., other ISPs and corporate networks). If the perimeter router was configured to BGP peer with an ISP, NIPRnet routes could be advertised to the ISP; thereby creating a backdoor connection from the internet to the NIPRnet.NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.
Solution
This requirement is not applicable for the DODIN Backbone.Configure the router such that there are no BGP neighbors configured to the remote AS that belongs to the alternate gateway service provider.
OS10(config)# router bgp 10
OS10(config-router-bgp-10)# no neighbor 120.100.5.2
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Dell_OS10_Switch_Y26M04_STIG.zip
Item Details
Audit Name: DISA Dell OS10 Switch Router STIG v1r2
Category: ACCESS CONTROL
References: 800-53|AC-4, CAT|I, CCI|CCI-001414, Rule-ID|SV-269861r1137919_rule, STIG-ID|OS10-RTR-000180, Vuln-ID|V-269861
Plugin: Dell_OS10
Control ID: 2a3f7f50d9ddd1aa3edce10a8dda25552cb8a55eb27f4dbcf5d1fcd6d0d7472b