STIGQter: STIG Summary: RUCKUS ICX Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX perimeter router must be configured to have Link Layer Discovery Protocols (LLDPs) disabled on all external interfaces.

DISA Rule

SV-273644r1110900_rule

Vulnerability Number

V-273644

Group Title

SRG-NET-000364-RTR-000111

Rule Version

RCKS-RTR-000770

Severity

CAT III

CCI(s)

• CCI-002403 - Only allow incoming communications from organization-defined authorized sources routed to organization-defined authorized destinations.

Weight

10

Fix Recommendation

This requirement is not applicable for the DODIN Backbone.

Disable LLDP on external interfaces of the perimeter router.

ICX(config)# no lldp enable ports ethernet 1/1/x to 1/1/y

Check Contents

This requirement is not applicable for the DODIN Backbone.

Review the global configuration to verify that LLDP has been disabled on external interfaces. (LLDP is enabled on all interfaces by default.)

show running-config | include lldp

no lldp enable ports ethernet 1/1/1

If LLDP is enabled on perimeter router external interfaces, this is a finding.

Vulnerability Number

V-273644

Documentable

False

Rule Version

RCKS-RTR-000770

Severity Override Guidance

This requirement is not applicable for the DODIN Backbone.

Review the global configuration to verify that LLDP has been disabled on external interfaces. (LLDP is enabled on all interfaces by default.)

show running-config | include lldp

no lldp enable ports ethernet 1/1/1

If LLDP is enabled on perimeter router external interfaces, this is a finding.

Check Content Reference

M

Target Key

5696