STIGQter: STIG Summary: RUCKUS ICX Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX out-of-band management (OOBM) gateway router must be configured to not redistribute routes between the management network routing domain and the managed network routing domain.

DISA Rule

SV-273589r1110914_rule

Vulnerability Number

V-273589

Group Title

SRG-NET-000019-RTR-000012

Rule Version

RCKS-RTR-000210

Severity

CAT II

CCI(s)

• CCI-001414 - Enforce approved authorizations for controlling the flow of information between connected systems based on organization-defined information flow control policies.

Weight

10

Fix Recommendation

This requirement is not applicable for the DODIN Backbone.

Remove "ip route x.x.x.x/x next-hop-vrf" commands from the configuration.

Check Contents

This requirement is not applicable for the DODIN Backbone.

Review the configuration for static routes with the "next-hop-vrf" keyword.

If static routes with "next-hop-vrf" are used and IGP/BGP routes redistribute these static routes, this is a finding.

Vulnerability Number

V-273589

Documentable

False

Rule Version

RCKS-RTR-000210

Severity Override Guidance

This requirement is not applicable for the DODIN Backbone.

Review the configuration for static routes with the "next-hop-vrf" keyword.

If static routes with "next-hop-vrf" are used and IGP/BGP routes redistribute these static routes, this is a finding.

Check Content Reference

M

Target Key

5696