STIGQter: STIG Summary: RUCKUS ICX Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX perimeter router must be configured to filter ingress traffic at the external interface on an inbound direction.

DISA Rule

SV-273608r1111033_rule

Vulnerability Number

V-273608

Group Title

SRG-NET-000205-RTR-000004

Rule Version

RCKS-RTR-000410

Severity

CAT II

CCI(s)

• CCI-001097 - Monitor and control communications at the external managed interfaces to the system and at key managed interfaces within the system.

Weight

10

Fix Recommendation

This requirement is not applicable for the DODIN Backbone.

Configure ACLs to external interface(s):
ICX(config)# interface ethernet x/x/x
ICX(config-if-e1000-x/x/x)#ip access-group EXT-ACL in logging enable

Check Contents

This requirement is not applicable for the DODIN Backbone.

Verify ACLs are applied to desired external interfaces on the inbound direction:
interface ethernet x/x/x
ip address x.11.1.2/31
ip access-group EXT-ACL in logging enable
!

If the perimeter router is not configured to filter ingress traffic on the external interface(s), this is a finding.

Vulnerability Number

V-273608

Documentable

False

Rule Version

RCKS-RTR-000410

Severity Override Guidance

This requirement is not applicable for the DODIN Backbone.

Verify ACLs are applied to desired external interfaces on the inbound direction:
interface ethernet x/x/x
ip address x.11.1.2/31
ip access-group EXT-ACL in logging enable
!

If the perimeter router is not configured to filter ingress traffic on the external interface(s), this is a finding.

Check Content Reference

M

Target Key

5696