STIGQter: STIG Summary: Nokia Service Router OS 25.x Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

The Nokia multicast router must be configured to disable Protocol Independent Multicast (PIM) on all interfaces that are not required to support multicast routing.

DISA Rule

SV-283889r1223373_rule

Vulnerability Number

V-283889

Group Title

SRG-NET-000019-RTR-000003

Rule Version

NOKI-RT-000740

Severity

CAT II

CCI(s)

CCI-001414 - Enforce approved authorizations for controlling the flow of information between connected systems based on organization-defined information flow control policies.

Weight

Fix Recommendation

Document all enabled interfaces for PIM in the network's multicast topology diagram. Disable support for PIM on interfaces that are not required to support it.

Configure the multicast router to disable the PIM interface using the example below:

- configure router pim interface "TO-PE1" shutdown

Check Contents

If IPv4 or IPv6 multicast routing is enabled, verify all interfaces enabled for PIM are documented in the network's multicast topology diagram.

Determine if the PIM interface is disabled using the command below:

- show router pim interface "TO-PE1"

PIM Interface ipv4 TO-PE1

Interface Adm Opr DR Prty Hello Intvl Mcast Send
DR
-------------------------------------------------------------------------------
TO-PE1 Down Down N/A 30 auto
N/A
-------------------------------------------------------------------------------
Interfaces : 1

If an interface is not required to support multicast routing and is enabled, this is a finding.

The Nokia multicast router must be configured to disable Protocol Independent Multicast (PIM) on all interfaces that are not required to support multicast routing.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key