STIGQter STIGQter: STIG Summary: Arista MLS EOS 4.X Router Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 02 Apr 2025:

The Arista router must not be configured to use IPv6 Site Local Unicast addresses.

DISA Rule

SV-256058r882516_rule

Vulnerability Number

V-256058

Group Title

SRG-NET-000512-RTR-000013

Rule Version

ARST-RT-000790

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the Arista router using authorized IPv6 addresses.

Step 1: Configure the interface with IPv6 address.

LEAF-1A(config-if-Et3)#interface ethernet 3
LEAF-1A(config-if-Et3)#no routerport
LEAF-1A(config-if-Et3)#ipv6 address FD6D:8D64:AF0C:2::/64

Check Contents

Review the Arista router configuration to ensure FEC0::/10 IP addresses are not defined.

Step 1: Verify that FECO::/10 IPv6 addresses are not configured.

interface ethernet 3
no routerport
ipv6 address FD6D:8D64:AF0C:2::/64

If IPv6 Site Local Unicast addresses are defined, this is a finding.

Vulnerability Number

V-256058

Documentable

False

Rule Version

ARST-RT-000790

Severity Override Guidance

Review the Arista router configuration to ensure FEC0::/10 IP addresses are not defined.

Step 1: Verify that FECO::/10 IPv6 addresses are not configured.

interface ethernet 3
no routerport
ipv6 address FD6D:8D64:AF0C:2::/64

If IPv6 Site Local Unicast addresses are defined, this is a finding.

Check Content Reference

M

Target Key

5513