STIGQter: STIG Summary: RUCKUS ICX Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX Router must be configured to advertise a hop limit of at least 32 in Router Advertisement messages for IPv6 stateless autoconfiguration deployments.

DISA Rule

SV-273665r1110904_rule

Vulnerability Number

V-273665

Group Title

SRG-NET-000512-RTR-000012

Rule Version

RCKS-RTR-001020

Severity

CAT III

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Configure the router to advertise a hop limit of at least "32" in Router Advertisement messages:

ICX(config)#ipv6 hop-limit xx
(Decimal between 32 and 255)

Check Contents

This requirement is not applicable for the DODIN Backbone.

Review the router configuration to determine if the hop limit has been configured for Router Advertisement messages (default value = 64).

Ipv6 hop-limit xx

If it has been configured and has not been set to at least "32", it is a finding.

Vulnerability Number

V-273665

Documentable

False

Rule Version

RCKS-RTR-001020

Severity Override Guidance

This requirement is not applicable for the DODIN Backbone.

Review the router configuration to determine if the hop limit has been configured for Router Advertisement messages (default value = 64).

Ipv6 hop-limit xx

If it has been configured and has not been set to at least "32", it is a finding.

Check Content Reference

M

Target Key

5696