STIGUI
V-269892CAT II — Medium severitySV-269892r1052061_rule

The Dell OS10 multicast Rendezvous Point (RP) must be configured to rate limit the number of Protocol Independent Multicast (PIM) Register messages.

Rule version OS10-RTR-000710 · STIG v1 · 2026-03-04

Discussion

When a new source starts transmitting in a PIM Sparse Mode network, the DR will encapsulate the multicast packets into register messages and forward them to the RP using unicast. This process can be taxing on the CPU for both the DR and the RP if the source is running at a high data rate and there are many new sources starting at the same time. This scenario can potentially occur immediately after a network failover. The rate limit for the number of register messages should be set to a relatively low value based on the known number of multicast sources within the multicast domain.

Check

Review the configuration of the RP to verify that it is rate limiting the number of multicast register messages.

Step 1: Verify that a control-plane class map for PIM packets has been configured.

OS10# show running-configuration class-map ! class-map type control-plane PIM-CLASS-MAP match pim

Step 2: Verify that a control-plane policy map for PIM packets has been configured that applies an appropriate rate limit in packets per second.

OS10# show running-configuration policy-map ! policy-map type control-plane PIM-POLICY-MAP ! class PIM-CLASS-MAP set qos-group 2 police cir 10 pir 50

Step 3: Verify the service policy has been assigned to the control plane.

OS10# show running-configuration control-plane ! control-plane service-policy input PIM-POLICY-MAP

If the RP is not limiting multicast register messages, this is a finding.

Fix

Configure the RP to rate limit the number of multicast register messages.

Step 1: Configure a control-plane class map for PIM packets.

OS10(config)# class-map type control-plane PIM-CLASS-MAP OS10(config-cmap-control-plane)# match pim

Step 2: Configure a control-plane policy map for PIM packets that applies an appropriate rate limit in packets per second.

OS10(config)# policy-map type control-plane PIM-POLICY-MAP OS10(config-pmap-control-plane)# class PIM-CLASS-MAP OS10 (config-pmap-c)# set qos-group 2 OS10 (config-pmap-c)# police cir 10 pir 50

Step 3: Assign the service policy to the control plane.

OS10(config)# control-plane OS10(config-control-plane)# service-policy input PIM-POLICY-MAP

Identifiers

Group ID
V-269892
Group title
SRG-NET-000362-RTR-000121
Rule ID
SV-269892r1052061_rule
Check ID
C-73925r1052059_chk
Fix ID
F-73826r1052060_fix