STIGQter: STIG Summary: Dell OS10 Switch Router Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Apr 2026:

The Dell OS10 Router must be configured to have IP directed broadcast disabled on all interfaces.

DISA Rule

SV-269888r1052480_rule

Vulnerability Number

V-269888

Group Title

SRG-NET-000362-RTR-000112

Rule Version

OS10-RTR-000630

Severity

CAT III

CCI(s)

• CCI-002385 - Protect against or limit the effects of organization-defined types of denial of service events.

Weight

10

Fix Recommendation

Disable IP directed broadcasts on all Layer 3 interfaces with the following commands.

OS10# system "echo net.ipv4.conf.all.bc_forwarding = 0 > /tmp/directed_broadcast.conf"
OS10# system "echo net.ipv4.conf.default.bc_forwarding = 0 >> /tmp/directed_broadcast.conf"
OS10# system "sudo cp /tmp/directed_broadcast.conf /etc/sysctl.d/"
OS10# system "sudo sysctl net.ipv4.conf.all.bc_forwarding=0"

Check Contents

Review the router configuration to determine if IP directed broadcast is enabled.

Perform the following command and verify that bc_forwarding = 0 for all interfaces. If bc_forwarding = 1 then directed broadcast is enabled. The default value is 0, disabled.

OS10# system "sudo sysctl net.ipv4.conf | grep bc_forwarding"

If IP directed broadcast is enabled on Layer 3 interfaces, this is a finding.

Vulnerability Number

V-269888

Documentable

False

Rule Version

OS10-RTR-000630

Severity Override Guidance

Review the router configuration to determine if IP directed broadcast is enabled.

Perform the following command and verify that bc_forwarding = 0 for all interfaces. If bc_forwarding = 1 then directed broadcast is enabled. The default value is 0, disabled.

OS10# system "sudo sysctl net.ipv4.conf | grep bc_forwarding"

If IP directed broadcast is enabled on Layer 3 interfaces, this is a finding.

Check Content Reference

M

Target Key

5668