The BGP router must be configured to reject inbound route advertisements for any prefixes belonging to the local autonomous system (AS).
An XCCDF Rule
Description
Accepting route advertisements belonging to the local AS can result in traffic looping or being black holed, or at a minimum using a non-optimized path.
- ID
- SV-207099r604135_rule
- Version
- SRG-NET-000018-RTR-000003
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Ensure all eBGP routers are configured to reject inbound route advertisements for any prefixes belonging to the local AS.