STIGQter STIGQter: STIG Summary: Arista MLS EOS 4.X Router Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 02 Apr 2025:

The Arista perimeter router must be configured to suppress Router Advertisements on all external IPv6-enabled interfaces.

DISA Rule

SV-256059r882519_rule

Vulnerability Number

V-256059

Group Title

SRG-NET-000512-RTR-000014

Rule Version

ARST-RT-000800

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

This requirement is not applicable for the DODIN backbone.

Configure the Arista router to suppress Router Advertisements on all external IPv6-enabled interfaces.

Configure the Arista router to suppress RAs on all IPv6 enabled interface as in the following example for VLAN 200:

router(config)#interface vlan 200
router(config-vl200)#ipv6 nd ra disabled all
router(config-vl200)#

Check Contents

This requirement is not applicable for the DODIN backbone.

Review the Arista router configuration to verify Router Advertisements are suppressed on all external IPv6-enabled interfaces.

<Example configuration for VLAN 200>
interface vlan 200
ipv6 nd ra disabled all

If the Arista router is not configured to suppress Router Advertisements on all external IPv6-enabled interfaces, this is a finding.

Vulnerability Number

V-256059

Documentable

False

Rule Version

ARST-RT-000800

Severity Override Guidance

This requirement is not applicable for the DODIN backbone.

Review the Arista router configuration to verify Router Advertisements are suppressed on all external IPv6-enabled interfaces.

<Example configuration for VLAN 200>
interface vlan 200
ipv6 nd ra disabled all

If the Arista router is not configured to suppress Router Advertisements on all external IPv6-enabled interfaces, this is a finding.

Check Content Reference

M

Target Key

5513