STIGQter: STIG Summary: Juniper EX Series Switches Router Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The Juniper MPLS router must be configured to have TTL Propagation disabled.

DISA Rule

SV-254063r844222_rule

Vulnerability Number

V-254063

Group Title

SRG-NET-000512-RTR-000004

Rule Version

JUEX-RT-000910

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Configure LERs to disable TTL propagation.

set protocols mpls no-propagate-ttl

Check Contents

Review the router configuration to verify that TTL propagation is disabled.
[edit protocols mpls]
no-propagate-ttl;

If the router is not configured to disable TTL propagation, this is a finding.

Vulnerability Number

V-254063

Documentable

False

Rule Version

JUEX-RT-000910

Severity Override Guidance

Review the router configuration to verify that TTL propagation is disabled.
[edit protocols mpls]
no-propagate-ttl;

If the router is not configured to disable TTL propagation, this is a finding.

Check Content Reference

M

Target Key

5479