STIGQter STIGQter: STIG Summary: Juniper EX Series Switches Router Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The Juniper router must be configured to advertise a hop limit of at least 32 in Router Advertisement messages for IPv6 stateless auto-configuration deployments.

DISA Rule

SV-254071r844246_rule

Vulnerability Number

V-254071

Group Title

SRG-NET-000512-RTR-000012

Rule Version

JUEX-RT-000990

Severity

CAT III

CCI(s)

Weight

10

Fix Recommendation

Configure the router to advertise a hop limit of at least 32 in Router Advertisement messages.

set protocols router-advertisement interface <internal interface> current-hop-limit <32 or greater>

Check Contents

This requirement is not applicable for the DODIN Backbone.

Review the router configuration to determine if the hop limit has been configured for Router Advertisement messages. Verify each interface configured for router advertisements contains a hop limit of at least 32.

[edit protocols]
router-advertisement {
interface ge-0/0/0.0 {
:
current-hop-limit 32; <<< Supported values: 0 - 255
:
}
}

If it has been configured and has not been set to at least 32, it is a finding.

Vulnerability Number

V-254071

Documentable

False

Rule Version

JUEX-RT-000990

Severity Override Guidance

This requirement is not applicable for the DODIN Backbone.

Review the router configuration to determine if the hop limit has been configured for Router Advertisement messages. Verify each interface configured for router advertisements contains a hop limit of at least 32.

[edit protocols]
router-advertisement {
interface ge-0/0/0.0 {
:
current-hop-limit 32; <<< Supported values: 0 - 255
:
}
}

If it has been configured and has not been set to at least 32, it is a finding.

Check Content Reference

M

Target Key

5479