STIGQter: STIG Summary: Nokia Service Router OS 25.x Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

The Nokia router must be configured to advertise a hop limit of at least 32 in Router Advertisement messages for IPv6 stateless auto-configuration deployments.

DISA Rule

SV-283849r1203796_rule

Vulnerability Number

V-283849

Group Title

SRG-NET-000512-RTR-000012

Rule Version

NOKI-RT-000310

Severity

CAT III

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Configure the router to advertise a hop limit of at least 32 in Router Advertisement messages, as shown in the example below:

- configure router router-advertisement interface "TO-PE2" current-hop-limit 32

Check Contents

This requirement is not applicable for the DODIN Backbone.

Review the router configuration to determine if the hop limit has been configured for Router Advertisement messages, as shown in the example below:

- show router rtr-advertisement | match "Hop Limit"
Retransmit Time : 00h00m00s0ms Hop Limit : 32

If the hop limit has been configured and has not been set to at least 32, this is a finding.

Vulnerability Number

V-283849

Documentable

False

Rule Version

NOKI-RT-000310

Severity Override Guidance

This requirement is not applicable for the DODIN Backbone.

Review the router configuration to determine if the hop limit has been configured for Router Advertisement messages, as shown in the example below:

- show router rtr-advertisement | match "Hop Limit"
Retransmit Time : 00h00m00s0ms Hop Limit : 32

If the hop limit has been configured and has not been set to at least 32, this is a finding.

Check Content Reference

M

Target Key

5746