STIGQter STIGQter: STIG Summary: Nokia Service Router OS 25.x Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

The Nokia router must be configured to have IP directed broadcast disabled on all interfaces.

DISA Rule

SV-283902r1204027_rule

Vulnerability Number

V-283902

Group Title

SRG-NET-000362-RTR-000112

Rule Version

NOKI-RT-000910

Severity

CAT III

CCI(s)

Weight

10

Fix Recommendation

Disable IP directed broadcasts on all layer 3 interfaces using the configuration below:

- configure router interface "TO-PE2" no allow-directed-broadcasts

Check Contents

Review the router configuration to determine if IP directed broadcast is enabled.

By default, the directed broadcast is disabled. There is no command to show the status of the IP directed broadcast configuration, but it can be verified by looking at the configuration for each interface.

Use the command below and verify "no allow-directed-broadcasts" is configured:

- configure router interface "TO-PE2"
- config>router>if# info detail | match allow-directed-broadcasts
no allow-directed-broadcasts

If IP directed broadcast is enabled on layer 3 interfaces, this is a finding.

Vulnerability Number

V-283902

Documentable

False

Rule Version

NOKI-RT-000910

Severity Override Guidance

Review the router configuration to determine if IP directed broadcast is enabled.

By default, the directed broadcast is disabled. There is no command to show the status of the IP directed broadcast configuration, but it can be verified by looking at the configuration for each interface.

Use the command below and verify "no allow-directed-broadcasts" is configured:

- configure router interface "TO-PE2"
- config>router>if# info detail | match allow-directed-broadcasts
no allow-directed-broadcasts

If IP directed broadcast is enabled on layer 3 interfaces, this is a finding.

Check Content Reference

M

Target Key

5746