Skip to content
Log In

Dell OS10 Switch Router Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-NET-000019-RTR-000012

    Group
    Show

  • The Dell OS10 out-of-band management (OOBM) gateway router must be configured to not redistribute routes between the management network routing domain and the managed network routing domain.

    If the gateway router is not a dedicated device for the OOBM network, several safeguards must be implemented for containment of management and production traffic boundaries; otherwise, it is possib...
    Rule Medium Severity
    Show

  • SRG-NET-000019-RTR-000013

    Group
    Show

  • The Dell OS10 multicast Rendezvous Point (RP) router must be configured to filter Protocol Independent Multicast (PIM) Register messages received from the Designated Router (DR) for any undesirable multicast groups and sources.

    Real-time multicast traffic can entail multiple large flows of data. An attacker can flood a network segment with multicast packets, over-using the available bandwidth and thereby creating a denial...
    Rule Low Severity
    Show

  • SRG-NET-000019-RTR-000014

    Group
    Show

  • The Dell OS10 multicast Rendezvous Point (RP) router must be configured to filter Protocol Independent Multicast (PIM) Join messages received from the Designated Router (DR) for any undesirable multicast groups.

    Real-time multicast traffic can entail multiple large flows of data. An attacker can flood a network segment with multicast packets, over-using the available bandwidth and thereby creating a denial...
    Rule Low Severity
    Show

  • SRG-NET-000078-RTR-000001

    Group
    Show

  • SRG-NET-000168-RTR-000077

    Group
    Show

  • SRG-NET-000168-RTR-000078

    Group
    Show

  • SRG-NET-000193-RTR-000112

    Group
    Show

  • SRG-NET-000205-RTR-000001

    Group
    Show

  • The Dell OS10 Router must be configured to restrict traffic destined to itself.

    The route processor handles traffic destined to the router—the key component used to build forwarding paths and is also instrumental with all network management functions. Hence, any disruption or ...
    Rule High Severity
    Show

  • SRG-NET-000205-RTR-000002

    Group
    Show

  • SRG-NET-000205-RTR-000006

    Group
    Show

  • The Dell OS10 BGP router must be configured to reject outbound route advertisements for any prefixes belonging to the IP core.

    Outbound route advertisements belonging to the core can result in traffic either looping or being black holed, or at a minimum, using a nonoptimized path.
    Rule Medium Severity
    Show

  • SRG-NET-000205-RTR-000010

    Group
    Show

  • The Dell OS10 out-of-band management (OOBM) gateway router must be configured to forward only authorized management traffic to the Network Operations Center (NOC).

    The OOBM network is an IP network used exclusively for the transport of OAM&P data from the network being managed to the OSS components located at the NOC. Its design provides connectivity to each ...
    Rule Medium Severity
    Show

  • SRG-NET-000205-RTR-000011

    Group
    Show

  • The Dell OS10 out-of-band management (OOBM) gateway router must be configured to block any traffic destined to itself that is not sourced from the OOBM network or the NOC.

    If the gateway router is not a dedicated device for the OOBM network, several safeguards must be implemented for containment of management and production traffic boundaries. It is imperative that h...
    Rule Medium Severity
    Show

  • SRG-NET-000230-RTR-000001

    Group
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules