STIGQter STIGQter: STIG Summary: RUCKUS ICX NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX device must be configured to compare the internal system clocks on an organization-defined frequency with two organization-defined authoritative time sources.

DISA Rule

SV-273851r1110853_rule

Vulnerability Number

V-273851

Group Title

SRG-APP-000925-NDM-000330

Rule Version

RCKS-NDM-001150

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure NTP clock synchronization.

Configure NTP:
device#configure terminal
device(config)# ntp
device(config-ntp)#server 216.239.35.8 (example IP)
device(config-ntp)# write memory

Configure NTP with authentication:
device#configure terminal
device(config)# ntp
device(config-ntp)#server 216.239.35.8 (example IP)
device(config-ntp)#authentication-key key-id 1234 sha1 testntpsession
device(config-ntp)# write memory

Check Contents

Verify NTP is configured and synchronizing with two peers:

device#show ntp association
address Domain name Reference Clock st when poll Reach delay offset disp
*~ 216.239.35.8 None GOOG 1 56 64 377 30.444 2.0021 2.884
+~ 23.150.40.242 pool.ntp.org 204.9.54.119 2 61 64 377 44.339 -0.6625 1.220
* synced, # selected, + candidate, - outlayer, x falseticker, ~ configured, **More characters in domain name

Vulnerability Number

V-273851

Documentable

False

Rule Version

RCKS-NDM-001150

Severity Override Guidance

Verify NTP is configured and synchronizing with two peers:

device#show ntp association
address Domain name Reference Clock st when poll Reach delay offset disp
*~ 216.239.35.8 None GOOG 1 56 64 377 30.444 2.0021 2.884
+~ 23.150.40.242 pool.ntp.org 204.9.54.119 2 61 64 377 44.339 -0.6625 1.220
* synced, # selected, + candidate, - outlayer, x falseticker, ~ configured, **More characters in domain name

Check Content Reference

M

Target Key

5695