STIGQter: STIG Summary: Infrastructure Router Security Technical Implementation Guide Juniper Version: 8 Release: 29 Benchmark Date: 25 Jan 2019: The router must have IP source routing disabled.

DISA Rule

SV-15317r2_rule

Vulnerability Number

V-3081

Group Title

IP Source Routing is not disabled on all routers.

Rule Version

NET0770

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure the router to disable IP source routing.

Check Contents

Under the edit chassis hierarchy, enter a show command to verify that the no-source-route command is present.

Vulnerability Number

V-3081

Documentable

False

Rule Version

NET0770

Severity Override Guidance

Under the edit chassis hierarchy, enter a show command to verify that the no-source-route command is present.

Check Content Reference

M

Responsibility

Information Assurance Officer

Target Key

510

Comments