STIGQter STIGQter: STIG Summary: Dell OS10 Switch Router Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Apr 2026:

The Dell OS10 BGP router must be configured to reject route advertisements from BGP peers that do not list their autonomous system (AS) number as the first AS in the AS_PATH attribute.

DISA Rule

SV-269854r1137898_rule

Vulnerability Number

V-269854

Group Title

SRG-NET-000018-RTR-000006

Rule Version

OS10-RTR-000060

Severity

CAT III

CCI(s)

Weight

10

Fix Recommendation

Configure the BGP router to reject route advertisements from BGP peers that do not list their AS number as the first AS in the AS_PATH attribute.

OS10# configure terminal
OS10 (config)# router bgp 100
OS10(config-router-bgp-100)# enforce-first-as
OS10(config-router-bgp-100)# end

Check Contents

By default, the Dell OS10 Router rejects route advertisements from BGP peers that do not list their AS number as the first AS in the AS_PATH attribute. Verify that this behavior has not been disable by reviewing the running-configuration of BGP:

OS10# show running-configuration bgp
!
router bgp 100
no enforce-first-as
…
!

Verify that "no enforce-first-as" has not been configured for BGP. If "no enforce-first-as" has been configured, this is a finding.

Vulnerability Number

V-269854

Documentable

False

Rule Version

OS10-RTR-000060

Severity Override Guidance

By default, the Dell OS10 Router rejects route advertisements from BGP peers that do not list their AS number as the first AS in the AS_PATH attribute. Verify that this behavior has not been disable by reviewing the running-configuration of BGP:

OS10# show running-configuration bgp
!
router bgp 100
no enforce-first-as
…
!

Verify that "no enforce-first-as" has not been configured for BGP. If "no enforce-first-as" has been configured, this is a finding.

Check Content Reference

M

Target Key

5668