STIGQter STIGQter: STIG Summary: Juniper EX Series Switches Router Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The Juniper BGP router must be configured to use its loopback address as the source address for iBGP peering sessions.

DISA Rule

SV-254060r844213_rule

Vulnerability Number

V-254060

Group Title

SRG-NET-000512-RTR-000001

Rule Version

JUEX-RT-000880

Severity

CAT III

CCI(s)

Weight

10

Fix Recommendation

Ensure that the router’s loopback address is used as the source address when originating traffic.

set protocols bgp group <group name> type internal
set protocols bgp group <group name> local-interface lo0.0

Check Contents

Review the router configuration to verify that a loopback address has been configured.

Verify that a loopback interface is used as the source address for all iBGP sessions.
bgp {
group iBGP {
type internal;
local-interface lo0.0;
:
}
}

If the router does not use its loopback address as the source address for all iBGP sessions, this is a finding.

Vulnerability Number

V-254060

Documentable

False

Rule Version

JUEX-RT-000880

Severity Override Guidance

Review the router configuration to verify that a loopback address has been configured.

Verify that a loopback interface is used as the source address for all iBGP sessions.
bgp {
group iBGP {
type internal;
local-interface lo0.0;
:
}
}

If the router does not use its loopback address as the source address for all iBGP sessions, this is a finding.

Check Content Reference

M

Target Key

5479