STIGQter: STIG Summary: Dell OS10 Switch Router Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Apr 2026:

The Dell OS10 out-of-band management (OOBM) gateway router must be configured to not redistribute routes between the management network routing domain and the managed network routing domain.

DISA Rule

SV-269864r1137928_rule

Vulnerability Number

V-269864

Group Title

SRG-NET-000019-RTR-000012

Rule Version

OS10-RTR-000210

Severity

CAT II

CCI(s)

• CCI-001414 - Enforce approved authorizations for controlling the flow of information between connected systems based on organization-defined information flow control policies.

Weight

10

Fix Recommendation

This requirement is not applicable for the DODIN Backbone.

Configure the IGP instance used for the managed network to prohibit redistribution of routes into the IGP instance used for the management network, and vice versa.

Delete any inappropriate route redistribution commands using the "no redistribute" command.

OS10(config)# router ospf 10 vrf OOBM
OS10(config-router-ospf-10)# no redistribute bgp 4 route-map dell4

Check Contents

This requirement is not applicable for the DODIN Backbone.

Verify the IGP instance used for the managed network does not redistribute routes into the IGP instance used for the management network, and vice versa.

Examine the configuration to verify that routes configured to be redistributed into the management network do not originate in a managed network, and vice versa.

!
router ospf 10 vrf OOBM
redistribute bgp 4 route-map dell4

If the IGP instance used for the managed network redistributes routes into the IGP instance used for the management network, or vice versa, this is a finding.

Vulnerability Number

V-269864

Documentable

False

Rule Version

OS10-RTR-000210

Severity Override Guidance

This requirement is not applicable for the DODIN Backbone.

Verify the IGP instance used for the managed network does not redistribute routes into the IGP instance used for the management network, and vice versa.

Examine the configuration to verify that routes configured to be redistributed into the management network do not originate in a managed network, and vice versa.

!
router ospf 10 vrf OOBM
redistribute bgp 4 route-map dell4

If the IGP instance used for the managed network redistributes routes into the IGP instance used for the management network, or vice versa, this is a finding.

Check Content Reference

M

Target Key

5668