Rule ID
SV-283879r1203886_rule
Version
V1R1
CCIs
Internet Service Providers (ISPs) use BGP to share route information with other autonomous systems (i.e., other ISPs and corporate networks). If the perimeter router was configured to BGP peer with an ISP, NIPRNet routes could be advertised to the ISP; creating a backdoor connection from the internet to the NIPRNet.
This requirement is not applicable for the DODIN Backbone. Review the configuration of the router connecting to the alternate gateway. Verify the alternate gateway using the command below: - show router static-route 0.0.0.0/0 Static Route Table (Router: Base) Family: IPv4 Prefix Nexthop Tag Met Pref Type Act Next Hop Interface ------------------------------------------------------------------------------- 0.0.0.0/0 0 1 5 NH N 10.50.10.1 n/a ------------------------------------------------------------------------------- No. of Static Routes: 1 If BGP neighbors are connecting the remote AS of the alternate gateway service provider, this is a finding.
This requirement is not applicable for the DODIN Backbone. Configure a static route on the perimeter router to reach the autonomous system of a router connecting to an alternate gateway, as shown in the example below: - configure router static-route-entry 0.0.0.0/0 next-hop 10.50.10.1 no shutdown