STIGQter: STIG Summary: RUCKUS ICX Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX perimeter router must be configured drop IPv6 packets with a Routing Header type 0, 1, or 3-255.

DISA Rule

SV-273651r1111046_rule

Vulnerability Number

V-273651

Group Title

SRG-NET-000364-RTR-000201

Rule Version

RCKS-RTR-000840

Severity

CAT II

CCI(s)

• CCI-002403 - Only allow incoming communications from organization-defined authorized sources routed to organization-defined authorized destinations.

Weight

10

Fix Recommendation

Add the command below to the global configuration:

ICX(config)#ipv6 drop routing-type

Check Contents

This requirement is not applicable for the DODIN Backbone.

Review the configuration for the command below (which drops all routing-types except 2):

Ipv6 drop routing-type

If the perimeter router is not configured to drop all routing header types other than 2, this is a finding.

Vulnerability Number

V-273651

Documentable

False

Rule Version

RCKS-RTR-000840

Severity Override Guidance

This requirement is not applicable for the DODIN Backbone.

Review the configuration for the command below (which drops all routing-types except 2):

Ipv6 drop routing-type

If the perimeter router is not configured to drop all routing header types other than 2, this is a finding.

Check Content Reference

M

Target Key

5696