The BGP router must be configured to reject outbound route advertisements for any prefixes belonging to the IP core.
An XCCDF Rule
Description
Outbound route advertisements belonging to the core can result in traffic either looping or being black holed, or at a minimum, using a non-optimized path.
- ID
- SV-207138r604135_rule
- Version
- SRG-NET-000205-RTR-000006
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure all eBGP routers to filter outbound route advertisements belonging to the IP core.