Free DISA STIG and SRG Library | Vaulted

V-3081

The router must have IP source routing disabled.

Finding ID
NET0770
Rule ID
SV-15316r2_rule
Severity
Cat II
CCE
(None)
Group Title
IP Source Routing is not disabled on all routers.
CCI
(None)
Target Key
(None)
Documentable
No
Discussion

Source routing is a feature of IP, whereby individual packets can specify routes. This feature is used in several different network attacks by bypassing perimeter and internal defense mechanisms.

Fix Text

Configure the router to disable IP source routing.

Check Content

Review the configuration to determine if source routing is enabled. The IOS command no ip source-route must be included in the configuration.

Responsibility

Information Assurance Officer