STIGQter: STIG Summary: RUCKUS ICX Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX multicast Rendezvous Pointerface (RP) Router must be configured to limit the multicast forwarding cache so that its resources are not saturated by managing an overwhelming number of Protocol Independent Multicast (PIM) and Multicast Source Discovery Protocol (MSDP) source-active entries.

DISA Rule

SV-273637r1110898_rule

Vulnerability Number

V-273637

Group Title

SRG-NET-000362-RTR-000120

Rule Version

RCKS-RTR-000700

Severity

CAT III

CCI(s)

• CCI-002385 - Protect against or limit the effects of organization-defined types of denial of service events.

Weight

10

Fix Recommendation

Configure the "system-max msdp-sa-cache" value to be above zero. (Reboot may be required to take effect.)

ICX(config)#system-max msdp-sa-cache 1024

Check Contents

View the "show default value" output for the msdp-sa-cache value. If that number is zero, this is a finding.

Vulnerability Number

V-273637

Documentable

False

Rule Version

RCKS-RTR-000700

Severity Override Guidance

View the "show default value" output for the msdp-sa-cache value. If that number is zero, this is a finding.

Check Content Reference

M

Target Key

5696