Skip to content
Log In

Cisco NX OS Switch RTR Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-NET-000512-RTR-000001

    Group
    Show

  • SRG-NET-000512-RTR-000002

    Group
    Show

  • The Cisco MPLS switch must be configured to use its loopback address as the source address for LDP peering sessions.

    Using a loopback address as the source address offers a multitude of uses for security, access, management, and scalability of backbone switches. It is easier to construct appropriate ingress filte...
    Rule Low Severity
    Show

  • SRG-NET-000512-RTR-000003

    Group
    Show

  • SRG-NET-000193-RTR-000001

    Group
    Show

  • SRG-NET-000512-RTR-000004

    Group
    Show

  • SRG-NET-000512-RTR-000005

    Group
    Show

  • The Cisco PE switch must be configured to have each Virtual Routing and Forwarding (VRF) instance bound to the appropriate physical or logical interfaces to maintain traffic separation between all MPLS L3VPNs.

    The primary security model for an MPLS L3VPN infrastructure is traffic separation. The service provider must guarantee the customer that traffic from one VPN does not leak into another VPN or into ...
    Rule High Severity
    Show

  • SRG-NET-000512-RTR-000006

    Group
    Show

  • SRG-NET-000512-RTR-000007

    Group
    Show

  • SRG-NET-000343-RTR-000001

    Group
    Show

  • SRG-NET-000512-RTR-000008

    Group
    Show

  • SRG-NET-000512-RTR-000009

    Group
    Show

  • SRG-NET-000193-RTR-000002

    Group
    Show

  • SRG-NET-000362-RTR-000119

    Group
    Show

  • SRG-NET-000192-RTR-000002

    Group
    Show

  • SRG-NET-000205-RTR-000007

    Group
    Show

  • SRG-NET-000205-RTR-000008

    Group
    Show

  • The Cisco PE switch must be configured with Unicast Reverse Path Forwarding (uRPF) loose mode enabled on all CE-facing interfaces.

    The uRPF feature is a defense against spoofing and denial-of-service (DoS) attacks by verifying if the source address of any ingress packet is reachable. To mitigate attacks that rely on forged sou...
    Rule Medium Severity
    Show

  • SRG-NET-000205-RTR-000016

    Group
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules