STIGQter: STIG Summary: RUCKUS ICX Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX router must be configured to have IP directed broadcast disabled on all interfaces.

DISA Rule

SV-273630r1110896_rule

Vulnerability Number

V-273630

Group Title

SRG-NET-000362-RTR-000112

Rule Version

RCKS-RTR-000630

Severity

CAT III

CCI(s)

• CCI-002385 - Protect against or limit the effects of organization-defined types of denial of service events.

Weight

10

Fix Recommendation

Disable IP directed broadcast on all interfaces as shown in the example below:

ICX(config)#interface ethernet 1/1/1
ICX(config-if-e1000-1/1/1)#no ip directed-broadcast

Check Contents

Review the router configuration to determine if it is compliant with this requirement. IP directed broadcast command is disabled by default.

The following is an example of the feature being enabled:

interface ethernet 1/1/1
ip address x.x.x.x 255.255.255.0
ip directed-broadcast

If IP directed broadcast is enabled on any interfaces, this is a finding.

Vulnerability Number

V-273630

Documentable

False

Rule Version

RCKS-RTR-000630

Severity Override Guidance

Review the router configuration to determine if it is compliant with this requirement. IP directed broadcast command is disabled by default.

The following is an example of the feature being enabled:

interface ethernet 1/1/1
ip address x.x.x.x 255.255.255.0
ip directed-broadcast

If IP directed broadcast is enabled on any interfaces, this is a finding.

Check Content Reference

M

Target Key

5696