STIGQter: STIG Summary: Nokia Service Router OS 25.x Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

The Nokia Multicast Source Discovery Protocol (MSDP) router must be configured to limit the amount of source-active messages it accepts on a per-peer basis.

DISA Rule

SV-283834r1203751_rule

Vulnerability Number

V-283834

Group Title

SRG-NET-000018-RTR-000009

Rule Version

NOKI-RT-000160

Severity

CAT III

CCI(s)

• CCI-001368 - Enforce approved authorizations for controlling the flow of information within the system based on organization-defined information flow control policies.

Weight

10

Fix Recommendation

Configure the MSDP router to limit the amount of source-active messages it accepts from each peer.

Configure the active-source limit, as shown in the example below:

- configure router msdp active-source-limit 2

Check Contents

Review the Nokia router configuration to determine if the "SA Limit" has been configured to limit the number of source-active messages it accepts on a per-peer basis.

Verify the source-active limit, as shown in the example below:

- show router msdp status | match "SA Limit"
SA Limit : 2
SA Limit Excd : 0

If the router is not configured to limit the source-active messages it accepts, this is a finding.

Vulnerability Number

V-283834

Documentable

False

Rule Version

NOKI-RT-000160

Severity Override Guidance

Review the Nokia router configuration to determine if the "SA Limit" has been configured to limit the number of source-active messages it accepts on a per-peer basis.

Verify the source-active limit, as shown in the example below:

- show router msdp status | match "SA Limit"
SA Limit : 2
SA Limit Excd : 0

If the router is not configured to limit the source-active messages it accepts, this is a finding.

Check Content Reference

M

Target Key

5746