Skip to content

Cisco IOS Switch RTR Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-NET-000364-RTR-000109

    Group
  • SRG-NET-000364-RTR-000110

    Group
  • The Cisco perimeter switch must be configured to block inbound packets with source Bogon IP address prefixes.

    Packets with Bogon IP source addresses should never be allowed to traverse the IP core. Bogon IP networks are RFC1918 addresses or address blocks that have never been assigned by the IANA or have b...
    Rule Medium Severity
  • SRG-NET-000205-RTR-000003

    Group
  • SRG-NET-000205-RTR-000004

    Group
  • SRG-NET-000205-RTR-000005

    Group
  • SRG-NET-000364-RTR-000111

    Group
  • SRG-NET-000364-RTR-000111

    Group
  • The Cisco perimeter switch must be configured to have Cisco Discovery Protocol (CDP) disabled on all external interfaces.

    CDP is a Cisco proprietary neighbor discovery protocol used to advertise device capabilities, configuration information, and device identity. CDP is media-and-protocol-independent as it runs over L...
    Rule Low Severity
  • SRG-NET-000364-RTR-000112

    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules