STIGQter: STIG Summary: Nokia Service Router OS 25.x Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

The Nokia Multicast Source Discovery Protocol (MSDP) router must be configured to authenticate all received MSDP packets.

DISA Rule

SV-283874r1203871_rule

Vulnerability Number

V-283874

Group Title

SRG-NET-000343-RTR-000002

Rule Version

NOKI-RT-000560

Severity

CAT II

CCI(s)

• CCI-001958 - Authenticate organization-defined devices and/or types of devices before establishing a local, remote, and/or network connection.

Weight

10

Fix Recommendation

Configure the MSDP router to authenticate all MSDP packets received, as shown in the example below:

- configure router msdp peer 1.1.1.1 authentication-key pass123

Check Contents

Review the router configuration to determine if received MSDP packets are authenticated.

Verify "Auth Status" is enabled using the command below:

- show router msdp peer 2.2.2.2 detail | match "Auth Status"
Auth Status : Enabled

If the router does not require MSDP authentication, this is a finding.

Vulnerability Number

V-283874

Documentable

False

Rule Version

NOKI-RT-000560

Severity Override Guidance

Review the router configuration to determine if received MSDP packets are authenticated.

Verify "Auth Status" is enabled using the command below:

- show router msdp peer 2.2.2.2 detail | match "Auth Status"
Auth Status : Enabled

If the router does not require MSDP authentication, this is a finding.

Check Content Reference

M

Target Key

5746