Network devices must authenticate all IGP peers.

From Perimeter L3 Switch Security Technical Implementation Guide

Part of Interior routing protocols are not authenticated.

Associated with IA controls: ECSC-1

SV-3034r3_rule Network devices must authenticate all IGP peers.

Vulnerability discussion

A rogue router could send a fictitious routing update to convince a site's premise router to send traffic to an incorrect or even a rogue destination. This diverted traffic could be analyzed to learn confidential information of the site's network, or merely used to disrupt the network's ability to effectively communicate with other networks.

Check content

Review the device configuration to determine if authentication is configured for all IGP peers. If authentication is not configured for all IGP peers, this is a finding.

Fix text

Configure authentication for all IGP peers.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.