STIGQter STIGQter: STIG Summary: Dell OS10 Switch Router Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Apr 2026:

The Dell OS10 Router must be configured to advertise a hop limit of at least 32 in Router Advertisement messages for IPv6 stateless auto-configuration deployments.

DISA Rule

SV-269902r1052091_rule

Vulnerability Number

V-269902

Group Title

SRG-NET-000512-RTR-000012

Rule Version

OS10-RTR-001020

Severity

CAT III

CCI(s)

Weight

10

Fix Recommendation

Configure each IPv6 interface to advertise a hop limit of at least 32 in Router Advertisement messages as in the example below.

OS10(config)# interface ethernet 1/1/4
OS10(conf-if-eth1/1/4)# ipv6 nd send-ra
OS10(conf-if-eth1/1/4)# ipv6 nd hop-limit 32

Check Contents

This requirement is not applicable for the DODIN Backbone.

Review the router configuration to determine if the hop limit has been configured for Router Advertisement messages.

Verify the ipv6 nd hop-limit settings are not configured less than 32.
!
interface ethernet1/1/4
...
ipv6 nd hop-limit 32

If it has been configured and has not been set to at least 32, it is a finding.

Vulnerability Number

V-269902

Documentable

False

Rule Version

OS10-RTR-001020

Severity Override Guidance

This requirement is not applicable for the DODIN Backbone.

Review the router configuration to determine if the hop limit has been configured for Router Advertisement messages.

Verify the ipv6 nd hop-limit settings are not configured less than 32.
!
interface ethernet1/1/4
...
ipv6 nd hop-limit 32

If it has been configured and has not been set to at least 32, it is a finding.

Check Content Reference

M

Target Key

5668