STIGUI
V-273638CAT II — Medium severitySV-273638r1110941_rule

The RUCKUS ICX multicast Rendezvous Pointerface (RP) must be configured to rate limit the number of Protocol Independent Multicast (PIM) Register messages.

Rule version RCKS-RTR-000710 · STIG v1 · 2025-06-03

Discussion

When a new source starts transmitting in a PIM Sparse Mode network, the DR will encapsulate the multicast packets into register messages and forward them to the RP using unicast. This process can be taxing on the CPU for both the DR and the RP if the source is running at a high data rate and there are many new sources starting at the same time. This scenario can potentially occur immediately after a network failover. The rate limit for the number of register messages must be set to a relatively low value based on the known number of multicast sources within the multicast domain.

Check

Review the configuration of the RP to verify that it is rate limiting the number of PIM register messages.

router pim rp-address x.0.1.1 register-rate-limit nn

If the RP is not limiting PIM register messages, this is a finding.

Fix

Configure the RP to rate limit the number of multicast register messages.

ICX(config)# router pim ICX(config-pim-router)#rp-address x.0.1.1 ICX(config-pim-router)#register-rate-limit nn

Identifiers

Group ID
V-273638
Group title
SRG-NET-000362-RTR-000121
Rule ID
SV-273638r1110941_rule
Check ID
C-77729r1109934_chk
Fix ID
F-77634r1109935_fix