The RUCKUS ICX BGP router must be configured to reject inbound route advertisements for any prefixes belonging to the local autonomous system (AS).

Accepting route advertisements belonging to the local AS can result in traffic looping or being black holed, or at a minimum using a nonoptimized path.

Review BGP neighbor configuration using "show running-config | begin router bgp".

If any BGP neighbor is configured for the "neighbor x.x.x. allowas-in" command, this is a finding.

Remove the command "neighbor x.x.x.x allowas-in" where found in the BGP neighbor configuration.