V-3081
IP source routing must be disabled.
Finding ID
NET0770
Rule ID
SV-3081r3_rule
Severity
CCE
(None)
Group Title
IP Source Routing is not disabled on all routers.
CCI
(None)
Target Key
(None)
Documentable
No
Discussion
Source routing is a feature of IP, whereby individual packets can specify routes. This feature is used in several different network attacks by bypassing perimeter and internal defense mechanisms.
Fix Text
Configure the router to disable IP source routing.
Check Content
Review the configuration to determine if source routing is disabled. If IP source routing is enabled, this is a finding.
Responsibility
Information Assurance Officer
IA Controls
ECSC-1