STIGQter: STIG Summary: RUCKUS ICX Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX multicast Designated Router (DR) must be configured to increase the shortest-path tree (SPT) threshold or set it to infinity to minimalize source-group (S, G) state within the multicast topology where Any Source Multicast (ASM) is deployed.

DISA Rule

SV-273640r1110943_rule

Vulnerability Number

V-273640

Group Title

SRG-NET-000362-RTR-000123

Rule Version

RCKS-RTR-000730

Severity

CAT II

CCI(s)

• CCI-002385 - Protect against or limit the effects of organization-defined types of denial of service events.

Weight

10

Fix Recommendation

Configure the DR to increase the SPT threshold or set to the maximum value to minimalize (S, G) state within the multicast topology where ASM is deployed. The maximum value is displayed in the example.

ICX(config)# router pim
ICX(config-pim-router)#spt-threshold 4294967295

Check Contents

Review the DR PIM configuration to verify that the SPT switchover threshold is increased (default is "1") or set to the maximum value.

router pim
rp-address 10.2.2.2
spt-threshold 4294967295

If the DR is not configured to increase the SPT threshold to minimalize (S, G) state, this is a finding.

Vulnerability Number

V-273640

Documentable

False

Rule Version

RCKS-RTR-000730

Severity Override Guidance

Review the DR PIM configuration to verify that the SPT switchover threshold is increased (default is "1") or set to the maximum value.

router pim
rp-address 10.2.2.2
spt-threshold 4294967295

If the DR is not configured to increase the SPT threshold to minimalize (S, G) state, this is a finding.

Check Content Reference

M

Target Key

5696