STIGQter STIGQter: STIG Summary: Nokia Service Router OS 25.x Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

The Nokia Provider Edge (PE) router must be configured to have each Virtual Routing and Forwarding (VRF) instance with the appropriate Route Target (RT).

DISA Rule

SV-283844r1203781_rule

Vulnerability Number

V-283844

Group Title

SRG-NET-000512-RTR-000006

Rule Version

NOKI-RT-000260

Severity

CAT I

CCI(s)

Weight

10

Fix Recommendation

Configure all PE routers to have the correct VRF defined with the appropriate RT, as shown in the example below:

- configure service vprn 30 customer 1 create
- config>service>vprn# bgp-ipvpn mpls vrf-target target:65100:30
- config>service>vprn# bgp-ipvpn mpls no shutdown

Check Contents

Verify the correct RT is configured for each VRF.

Review the design plan for MPLS/L3VPN and VRF-lite to determine what RTs have been assigned for each VRF.

Use the command below to verify "Vrf Target" fields:

- show service id 30 base | match "Vrf Target"
Vrf Target : target:65100:30

If any VRFs are configured with the wrong RT, this is a finding.

Vulnerability Number

V-283844

Documentable

False

Rule Version

NOKI-RT-000260

Severity Override Guidance

Verify the correct RT is configured for each VRF.

Review the design plan for MPLS/L3VPN and VRF-lite to determine what RTs have been assigned for each VRF.

Use the command below to verify "Vrf Target" fields:

- show service id 30 base | match "Vrf Target"
Vrf Target : target:65100:30

If any VRFs are configured with the wrong RT, this is a finding.

Check Content Reference

M

Target Key

5746