STIGQter STIGQter: STIG Summary: Dell OS10 Switch Router Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Apr 2026:

The Dell OS10 BGP router must be configured to use the maximum prefixes feature to protect against route table flooding and prefix deaggregation attacks.

DISA Rule

SV-269890r1052055_rule

Vulnerability Number

V-269890

Group Title

SRG-NET-000362-RTR-000117

Rule Version

OS10-RTR-000670

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure all eBGP routers to use the maximum prefixes feature to protect against route table flooding and prefix deaggregation attacks.

OS10(config)#router bgp 10
OS10(config-router-bgp-10)# template ebgp
OS10(config-router-template)# address-family ipv4 unicast
OS10(config-router-bgp-neighbor-af)# maximum-prefix 10 50

Check Contents

Review the router configuration to verify the number of received prefixes from each eBGP neighbor is controlled.

Verify that a maximum-prefix value is configured in the appropriate neighbor entries or templates.

router bgp 10
!
template ebgp
!
address-family ipv4 unicast
maximum-prefix 10 50

If the router is not configured to control the number of prefixes received from each peer to protect against route table flooding and prefix deaggregation attacks, this is a finding.

Vulnerability Number

V-269890

Documentable

False

Rule Version

OS10-RTR-000670

Severity Override Guidance

Review the router configuration to verify the number of received prefixes from each eBGP neighbor is controlled.

Verify that a maximum-prefix value is configured in the appropriate neighbor entries or templates.

router bgp 10
!
template ebgp
!
address-family ipv4 unicast
maximum-prefix 10 50

If the router is not configured to control the number of prefixes received from each peer to protect against route table flooding and prefix deaggregation attacks, this is a finding.

Check Content Reference

M

Target Key

5668