STIGQter STIGQter: STIG Summary: RUCKUS ICX Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX Router must be configured to suppress Router Advertisements on all external IPv6-enabled interfaces.

DISA Rule

SV-273667r1111050_rule

Vulnerability Number

V-273667

Group Title

SRG-NET-000512-RTR-000014

Rule Version

RCKS-RTR-001040

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the router to suppress Router Advertisements on all external IPv6-enabled interfaces as shown in the example below:

ICX(config)#interface ethernet 1/1/1
ICX(config-if-e2500-1/1/1)# ipv6 nd suppress-ra

Check Contents

This requirement is not applicable for the DODIN Backbone.

Review configuration of external IPv6 interfaces for the command below:

interface ethernet x/x/x
ipv6 nd suppress-ra

If the perimeter router is not configured to suppress router advertisements on all external interfaces, this is a finding.

Vulnerability Number

V-273667

Documentable

False

Rule Version

RCKS-RTR-001040

Severity Override Guidance

This requirement is not applicable for the DODIN Backbone.

Review configuration of external IPv6 interfaces for the command below:

interface ethernet x/x/x
ipv6 nd suppress-ra

If the perimeter router is not configured to suppress router advertisements on all external interfaces, this is a finding.

Check Content Reference

M

Target Key

5696