NET0985 - IGP instances do not peer with appropriate domain

Information

IGP instances configured on the OOBM gateway router do not peer only with their appropriate routing domain.

If the gateway router is not a dedicated device for the OOBM network, several safeguards must be implemented for containment of management and production traffic boundaries. Since the managed network and the management network are separate routing domains, separate IGP routing instances must be configured on the router-one for the managed network and one for the OOBM network.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Ensure that multiple IGP instances configured on the OOBM gateway router peer only with their appropriate routing domain. Verify that the all interfaces are configured for the appropriate IGP instance.

See Also

https://iasecontent.disa.mil/stigs/zip/U_Network_Perimeter_Router_L3_Switch_V8R32_STIG.zip

Item Details

References: CAT|II, Rule-ID|SV-19068r1_rule, STIG-ID|NET0985, Vuln-ID|V-17815

Plugin: Cisco

Control ID: 296f6f8e706cc3481c7b26cf3b392ed386ba740ed28fb92d9a79e78cf98b7c46