STIGQter: STIG Summary: RUCKUS ICX Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX Multicast Source Discovery Protocol (MSDP) Router must be configured to use its loopback address when originating MSDP traffic.

DISA Rule

SV-273664r1110903_rule

Vulnerability Number

V-273664

Group Title

SRG-NET-000512-RTR-000011

Rule Version

RCKS-RTR-001010

Severity

CAT III

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Configure the router's loopback address to be used as the source address when originating traffic.

1. Create loopback interface.
ICX(config)#interface loop 1
ICX(config-lbif-1)#ip addr x.x.x.x/32

2. Set the loopback interface as source for MSDP peers.
ICX(config)#router msdp
ICX(config-msdp-router)#l msdp-peer x.x.x.x connect-source loop 1

Check Contents

Review configuration to verify that MSDP uses a loopback address as its source.

interface loopback 1
ip address x.x.x.x 255.255.255.255
!
router msdp
msdp-peer x.x.x.x connect-source loopback 1
!

If the MSDP router does not use its loopback address as the source address for MSDP traffic, this is a finding.

Vulnerability Number

V-273664

Documentable

False

Rule Version

RCKS-RTR-001010

Severity Override Guidance

Review configuration to verify that MSDP uses a loopback address as its source.

interface loopback 1
ip address x.x.x.x 255.255.255.255
!
router msdp
msdp-peer x.x.x.x connect-source loopback 1
!

If the MSDP router does not use its loopback address as the source address for MSDP traffic, this is a finding.

Check Content Reference

M

Target Key

5696