STIGQter STIGQter: STIG Summary: Nokia Service Router OS 25.x Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

The Nokia multicast Designated Router (DR) must be configured to increase the shortest-path tree (SPT) threshold or set it to infinity to minimize source-group (S, G) state within the multicast topology where Any Source Multicast (ASM) is deployed.

DISA Rule

SV-283858r1203823_rule

Vulnerability Number

V-283858

Group Title

SRG-NET-000362-RTR-000123

Rule Version

NOKI-RT-000400

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the multicast router to increase the SPT threshold or set it to infinity to minimize the source-group state within the multicast topology where ASM is deployed, as shown in the example below:

- configure router pim spt-switchover-threshold 239.4.4.0/24 "infinity"

Check Contents

Review the multicast last-hop router configuration to verify the SPT switchover threshold is increased (default is "0") or set to infinity (never switch over).

Use the command below to verify the "Spt threshold" value:

- show router pim group detail | match "Spt threshold"
Spt threshold : 4294967295 kbps ECMP opt threshold : 7

If any multicast router is not configured to increase the SPT threshold or set to infinity to minimize source-group state, this is a finding.

Vulnerability Number

V-283858

Documentable

False

Rule Version

NOKI-RT-000400

Severity Override Guidance

Review the multicast last-hop router configuration to verify the SPT switchover threshold is increased (default is "0") or set to infinity (never switch over).

Use the command below to verify the "Spt threshold" value:

- show router pim group detail | match "Spt threshold"
Spt threshold : 4294967295 kbps ECMP opt threshold : 7

If any multicast router is not configured to increase the SPT threshold or set to infinity to minimize source-group state, this is a finding.

Check Content Reference

M

Target Key

5746