STIGQter: STIG Summary: Dell OS10 Switch Router Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Apr 2026:

The Dell OS10 out-of-band management (OOBM) gateway router must be configured to have separate Interior Gateway Protocol (IGP) instances for the managed network and management network.

DISA Rule

SV-269863r1137925_rule

Vulnerability Number

V-269863

Group Title

SRG-NET-000019-RTR-000011

Rule Version

OS10-RTR-000200

Severity

CAT II

CCI(s)

• CCI-001414 - Enforce approved authorizations for controlling the flow of information between connected systems based on organization-defined information flow control policies.

Weight

10

Fix Recommendation

Configure the router to enforce that IGP instances configured on the OOBM gateway router peer only with their own routing domain.

OS10(config)# ip vrf OOBM
OS10(conf-vrf)# exit

OS10(config)# ip vrf PROD
OS10(conf-vrf)# exit

OS10(config)# router ospf 1 vrf OOBM
OS10(config-router-ospf-1)# router-id 77.0.0.10
OS10(config-router-ospf-1)# exit

OS10(config)# router ospf 2 vrf PROD
OS10(config-router-ospf-2)# router-id 88.0.0.88
OS10(config-router-ospf-2)# exit

Check Contents

This requirement is not applicable for the DODIN Backbone.

Verify the OOBM interface is an adjacency in the IGP routing domain for the management network.

Verify the IGP instance used for the management network is configured in a separate VRF from that used for the managed networks.

!
router ospf 1 vrf OOBM
router-id 77.0.0.10
...
!
router ospf 2 vrf PROD
router-id 88.0.0.88
...
!

If the router does not enforce that IGP instances configured on the OOBM gateway router peer only with their own routing domain, this is a finding.

Vulnerability Number

V-269863

Documentable

False

Rule Version

OS10-RTR-000200

Severity Override Guidance

This requirement is not applicable for the DODIN Backbone.

Verify the OOBM interface is an adjacency in the IGP routing domain for the management network.

Verify the IGP instance used for the management network is configured in a separate VRF from that used for the managed networks.

!
router ospf 1 vrf OOBM
router-id 77.0.0.10
...
!
router ospf 2 vrf PROD
router-id 88.0.0.88
...
!

If the router does not enforce that IGP instances configured on the OOBM gateway router peer only with their own routing domain, this is a finding.

Check Content Reference

M

Target Key

5668