STIGQter: STIG Summary: RUCKUS ICX Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX multicast edge router must be configured to establish boundaries for administratively scoped multicast traffic.

DISA Rule

SV-273583r1110888_rule

Vulnerability Number

V-273583

Group Title

SRG-NET-000019-RTR-000005

Rule Version

RCKS-RTR-000150

Severity

CAT III

CCI(s)

• CCI-001414 - Enforce approved authorizations for controlling the flow of information between connected systems based on organization-defined information flow control policies.

Weight

10

Fix Recommendation

Establish a multicast boundary for administratively scoped multicast traffic:

ip access-list standard MULTICAST_SCOPE
sequence 10 deny 239.0.0.0 0.255.255.255
sequence 20 permit any
!
interface ethernet 1/1/10
ip address x.12.1.10 255.255.255.0
ip pim-sparse
ip pim neighbor-filter PIM_NEIGHBORS
ip multicast-boundary MULTICAST_SCOPE
!

Check Contents

Verify boundaries are established for administratively scoped multicast traffic:

ip access-list standard MULTICAST_SCOPE
sequence 10 deny 239.0.0.0 0.255.255.255
sequence 20 permit any
!

interface ethernet 1/1/10
ip address x.12.1.10 255.255.255.0
ip pim-sparse
ip pim neighbor-filter PIM_NEIGHBORS
ip multicast-boundary MULTICAST_SCOPE
!

If the multicast boundary is not established, this is a finding.

Vulnerability Number

V-273583

Documentable

False

Rule Version

RCKS-RTR-000150

Severity Override Guidance

Verify boundaries are established for administratively scoped multicast traffic:

ip access-list standard MULTICAST_SCOPE
sequence 10 deny 239.0.0.0 0.255.255.255
sequence 20 permit any
!

interface ethernet 1/1/10
ip address x.12.1.10 255.255.255.0
ip pim-sparse
ip pim neighbor-filter PIM_NEIGHBORS
ip multicast-boundary MULTICAST_SCOPE
!

If the multicast boundary is not established, this is a finding.

Check Content Reference

M

Target Key

5696