STIGQter: STIG Summary: Nokia Service Router OS 25.x Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

The Nokia router must be configured to have all inactive interfaces disabled.

DISA Rule

SV-283903r1203958_rule

Vulnerability Number

V-283903

Group Title

SRG-NET-000019-RTR-000007

Rule Version

NOKI-RT-000920

Severity

CAT III

CCI(s)

CCI-001414 - Enforce approved authorizations for controlling the flow of information between connected systems based on organization-defined information flow control policies.

Weight

Fix Recommendation

Delete inactive subinterfaces and disable and delete the configuration of any inactive ports on the router.

Disable inactive ports using the configuration below:

- configure port 1/1/c2/1 shutdown

Disable inactive logical interfaces using the configuration below:

- configure router interface "TO-PE2" shutdown

Check Contents

Review the router configuration.

Verify the logical port is disabled using the command below:

show port 1/1/c2/1 | match "Admin State"

Admin State : down Oper Duplex : full

Verify the logical interface is disabled using the command below:

- show router interface "TO-PE2"

Interface Table (Router: Base)

Interface-Name Adm Opr(v4/v6) Mode Port/SapId
IP-Address PfxState
-------------------------------------------------------------------------------
TO-PE2 Down Down/Down Network 1/1/c1/1
172.22.21.2/30 n/a
2001:acad:1234:21::2/64 INACCESSIBLE
fe80::67:47f1:52a9:fb0c/64 INACCESSIBLE
-------------------------------------------------------------------------------
Interfaces : 1

If an interface is not being used but is configured or enabled, this is a finding.

The Nokia router must be configured to have all inactive interfaces disabled.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key