STIGQter: STIG Summary: Nokia Service Router OS 25.x Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

The Nokia Border Gateway Protocol (BGP) router must be configured to enable the Generalized TTL Security Mechanism (GTSM).

DISA Rule

SV-283890r1203919_rule

Vulnerability Number

V-283890

Group Title

SRG-NET-000362-RTR-000124

Rule Version

NOKI-RT-000750

Severity

CAT III

CCI(s)

• CCI-002385 - Protect against or limit the effects of organization-defined types of denial of service events.

Weight

10

Fix Recommendation

Configure all Exterior Border Gateway Protocol peering sessions to use GTSM using the example below:

- configure router bgp group "eBGP" ttl-security 1

Check Contents

Review the router configuration.

Use the command below and verify "TTL Security" is "Enabled" and the "Min TTL Value" is configured correctly:

- show router bgp group "eBGP" detail | match TTL

TTL Security : Enabled Min TTL Value : 1

If the router is not configured to use GTSM for all Exterior Border Gateway Protocol peering sessions, this is a finding.

Vulnerability Number

V-283890

Documentable

False

Rule Version

NOKI-RT-000750

Severity Override Guidance

Review the router configuration.

Use the command below and verify "TTL Security" is "Enabled" and the "Min TTL Value" is configured correctly:

- show router bgp group "eBGP" detail | match TTL

TTL Security : Enabled Min TTL Value : 1

If the router is not configured to use GTSM for all Exterior Border Gateway Protocol peering sessions, this is a finding.

Check Content Reference

M

Target Key

5746