STIGQter: STIG Summary: RUCKUS ICX Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX router must be configured to have Gratuitous Address Resolution Protocol (ARP) disabled on all external interfaces.

DISA Rule

SV-273629r1111036_rule

Vulnerability Number

V-273629

Group Title

SRG-NET-000362-RTR-000111

Rule Version

RCKS-RTR-000620

Severity

CAT II

CCI(s)

• CCI-002385 - Protect against or limit the effects of organization-defined types of denial of service events.

Weight

10

Fix Recommendation

Disable learning of gratuitous ARPs:

ICX(config)#no ip arp learn-gratuitous-arp

Check Contents

The RUCKUS ICX disables gratuitous ARP by default. Review the configuration to verify the command below does not appear.

ip arp learn-gratuitous-arp

If the above command is present in the configuration, this is a finding.

Vulnerability Number

V-273629

Documentable

False

Rule Version

RCKS-RTR-000620

Severity Override Guidance

The RUCKUS ICX disables gratuitous ARP by default. Review the configuration to verify the command below does not appear.

ip arp learn-gratuitous-arp

If the above command is present in the configuration, this is a finding.

Check Content Reference

M

Target Key

5696