Create and use a single Loopback Address for Routing Protocol Peering

低レベル 2手動レビューcisco-nxos

説明

The use of a loopback interface is recommended for use in all routing protocols. This recommendation describes the configuration of the loopback interface. Routing protocol specific configurations are described under the respective routing protocols. Loopback interfaces are always up, and so are not dependent on physical interface link state issues (cabling or other link issues for instance). This means traffic sourced from a loopback interface can take any valid path to establish a routing relationship ... CIS assessment: Manual. Reported as SKIP with review instructions.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

CIS assessment: Manual. switch# sho ip int brief | i Lo Lo0 10.11.11.1 protocol-up/link-up/admin-up

修正方法

修正方法: ガイダンスまたは IaC パッチ

! Creating the loopback interface is a simple process. Addressing the loopback, in particular computing the subnet mask will vary by the organization and application. Often smaller subnets can be used for loopbacks, depending on how many potential peers are possible. int loopback 0 ip address 10.11.11.1 255.255.255.252 In order to use the loopback interface (rather than the closest interface to the routing peer), it must be explicitly configured in the routing protocol. This is described in the recommendations for each respective routing protocol.

プロパティ

オペレーティングシステム: すべて
タグ: cisco-nxosnetworkrouting
参照: CIS Cisco NX-OS Benchmark v1.2.0 - 3.1.4.2 Create and use a single Loopback Address for Routing Protocol Peering