STIGQter STIGQter: STIG Summary: Nokia Service Router OS 25.x Network Device Management Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

The Nokia router must be configured to protect nonlocal maintenance sessions by separating the maintenance session from other network sessions within the system by logically separated communications paths.

DISA Rule

SV-283792r1203421_rule

Vulnerability Number

V-283792

Group Title

SRG-APP-000880-NDM-000290

Rule Version

NOKI-ND-001010

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the out-of-band management session using the management port.

Assign an IP address to the management port:

- bof address <ip address>

Configure any static-routes needed:

- bof static-route <ip prefix/mask> next-hop <ip address>

Check Contents

Verify the out-of-band management IP address and static-routes are configured:

- show bof

primary-image cf3:\TiMOS-SR-24.10.R5
primary-config cf3:\config.cfg
secondary-image cf3:\TiMOS-SR-24.3.R3
license-file cf3:\license-xma.txt
address 10.1.0.156/24 active
address 10.1.0.157/24 standby
static-route 0.0.0.0/1 next-hop 10.1.0.1
static-route 128.0.0.0/1 next-hop 10.1.0.1

If the out-of-band management IP address and static-routes are not configured, this is a finding.

Vulnerability Number

V-283792

Documentable

False

Rule Version

NOKI-ND-001010

Severity Override Guidance

Verify the out-of-band management IP address and static-routes are configured:

- show bof

primary-image cf3:\TiMOS-SR-24.10.R5
primary-config cf3:\config.cfg
secondary-image cf3:\TiMOS-SR-24.3.R3
license-file cf3:\license-xma.txt
address 10.1.0.156/24 active
address 10.1.0.157/24 standby
static-route 0.0.0.0/1 next-hop 10.1.0.1
static-route 128.0.0.0/1 next-hop 10.1.0.1

If the out-of-band management IP address and static-routes are not configured, this is a finding.

Check Content Reference

M

Target Key

5744