STIGQter STIGQter: STIG Summary: Nokia Service Router OS 25.x Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

The Nokia router must not be configured to use IPv6 Site Local Unicast addresses.

DISA Rule

SV-283899r1203946_rule

Vulnerability Number

V-283899

Group Title

SRG-NET-000512-RTR-000013

Rule Version

NOKI-RT-000880

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the router using authorized IPv6 addresses using the example below:

- configure router interface TO-CORE
- config>router>if$ ipv6 address 2001:db8:100:1::1/64
- config>router>if$ port 1/1/c8/1
- config>router>if$ exit all

Check Contents

Review the router configuration to ensure FEC0::/10 IP addresses are not defined.

Use the command below and verify IPv6 addresses are defined for all interfaces:

- show router interface "TO-CORE" detail | match "IPv6 Address"
IPv6 Address : 2001:db8:100:1::1/64

If IPv6 Site Local Unicast addresses are defined, this is a finding.

Vulnerability Number

V-283899

Documentable

False

Rule Version

NOKI-RT-000880

Severity Override Guidance

Review the router configuration to ensure FEC0::/10 IP addresses are not defined.

Use the command below and verify IPv6 addresses are defined for all interfaces:

- show router interface "TO-CORE" detail | match "IPv6 Address"
IPv6 Address : 2001:db8:100:1::1/64

If IPv6 Site Local Unicast addresses are defined, this is a finding.

Check Content Reference

M

Target Key

5746