STIGQter STIGQter: STIG Summary: RUCKUS ICX Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX Router must be configured to have each VRF with the appropriate Route Distinguisher (RD).

DISA Rule

SV-273660r1110952_rule

Vulnerability Number

V-273660

Group Title

SRG-NET-000512-RTR-000007

Rule Version

RCKS-RTR-000970

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Delete incorrect VRFs and reconfigure them with correct RDs, as needed.

ICX(config)# vrf CE1
ICX(config-vrf-CE1)# rd 11:11
ICX(config-vrf-CE1)# address-family ipv4 unicast

Check Contents

View VRF configuration to determine whether each RD has been configured correctly.

If VRFs are configured with incorrect RDs, this is a finding.

Vulnerability Number

V-273660

Documentable

False

Rule Version

RCKS-RTR-000970

Severity Override Guidance

View VRF configuration to determine whether each RD has been configured correctly.

If VRFs are configured with incorrect RDs, this is a finding.

Check Content Reference

M

Target Key

5696