Best Practice Detail

13-12-8050

Network Operators, Service Providers and Public Safety should protect the MPLS router configuration by 1) Securing machines that control login, monitoring, authentication and logging to/from routing and monitoring devices, 2) Monitoring the integrity of customer specific router configuration provisioning, 3) Implementing (e)BGP filtering to protect against labeled-path poisoning from customers/peers. This applies to Public Safety only in an NG9-1-1 environment.

Status: Rollover New

References/Comments: IETF RFC 2547, RFC 3813 & draft-ietf-l3vpn-security-framework-02.txt NIST SP 800-54 Border Gateway Protocol Security ITU - CCITT Rec. X.800 Series (X.811 & X.812).

Historical events:

• Network Operators
• Service Providers
• Public Safety
• Internet/Data
• Cyber Security
• Network Design
• Network Elements
• Network Operations
• Public Safety Service
• Intrusion Detection
• CSRIC VII: Rollover New In CSRIC VII