SV-269869r1051992_rule
V-269869
SRG-NET-000168-RTR-000078
OS10-RTR-000300
CAT II
10
Configure routing protocol authentication to use a NIST-validated FIPS 198-1 message authentication code algorithm.
OS10(config)# interface vlan 400
OS10(conf-if-vl-400)# ipv6 ospf 10 area 0.0.0.1
OS10(conf-if-vl-400)# ipv6 ospf authentication ipsec spi 4017 sha1 1234567890123456789012345678901234567890
OS10(conf-if-vl-400)# exit
Review the router configuration to verify it is using a NIST-validated FIPS 198-1 message authentication code algorithm to authenticate routing protocol messages.
!
interface vlan400
ipv6 ospf 10 area 0.0.0.1
ipv6 ospf authentication ipsec spi 4017 sha1 1234567890123456789012345678901234567890
If a NIST-validated FIPS 198-1 message authentication code algorithm is not being used to authenticate routing protocol messages, this is a finding.
V-269869
False
OS10-RTR-000300
Review the router configuration to verify it is using a NIST-validated FIPS 198-1 message authentication code algorithm to authenticate routing protocol messages.
!
interface vlan400
ipv6 ospf 10 area 0.0.0.1
ipv6 ospf authentication ipsec spi 4017 sha1 1234567890123456789012345678901234567890
If a NIST-validated FIPS 198-1 message authentication code algorithm is not being used to authenticate routing protocol messages, this is a finding.
M
5668