V-17815
IGP instances configured on the OOBM gateway router do not peer only with their appropriate routing domain.
Finding ID
NET0985
Rule ID
SV-19068r1_rule
Severity
CCE
(None)
Group Title
IGP instances do not peer with appropriate domain
CCI
(None)
Target Key
(None)
Documentable
No
Discussion
If the gateway router is not a dedicated device for the OOBM network, several safeguards must be implemented for containment of management and production traffic boundaries. Since the managed network and the management network are separate routing domains, separate IGP routing instances must be configured on the router—one for the managed network and one for the OOBM network.
Fix Text
Ensure that multiple IGP instances configured on the OOBM gateway router peer only with their appropriate routing domain. Verify that the all interfaces are configured for the appropriate IGP instance.
Check Content
Verify that the OOBM interface is an adjacency only in the IGP routing domain for the management network.
Responsibility
System Administrator
IA Controls
ECSC-1