STIGQter STIGQter: STIG Summary: Nokia Service Router OS 25.x Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

The Nokia Border Gateway Protocol (BGP) router must be configured to use its loopback address as the source address for iBGP peering sessions.

DISA Rule

SV-283830r1203739_rule

Vulnerability Number

V-283830

Group Title

SRG-NET-000512-RTR-000001

Rule Version

NOKI-RT-000120

Severity

CAT III

CCI(s)

Weight

10

Fix Recommendation

Ensure the router's loopback address is used as the source address when originating traffic.

Configure the local address, as shown in the example below:

- configure router bgp
- config>router>bgp# group "iBGP"
- config>router>bgp>group# local-address 3.3.3.3
- config>router>bgp>group# exit all

Check Contents

Review the router configuration to verify a loopback address has been configured.

Verify a loopback interface is used as the source address for all iBGP sessions.

Use the command below and verify the "BGP Router ID" IP address matches the loopback address:

- show router bgp neighbor 4.4.4.4 detail | match "Local Address"
Local Address : 3.3.3.3

If the router does not use its loopback address as the source address for all iBGP sessions, this is a finding.

Vulnerability Number

V-283830

Documentable

False

Rule Version

NOKI-RT-000120

Severity Override Guidance

Review the router configuration to verify a loopback address has been configured.

Verify a loopback interface is used as the source address for all iBGP sessions.

Use the command below and verify the "BGP Router ID" IP address matches the loopback address:

- show router bgp neighbor 4.4.4.4 detail | match "Local Address"
Local Address : 3.3.3.3

If the router does not use its loopback address as the source address for all iBGP sessions, this is a finding.

Check Content Reference

M

Target Key

5746