STIGQter: STIG Summary: Juniper Router RTR Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 12 Feb 2021:

The Juniper router must be configured to have all inactive interfaces disabled.

DISA Rule

SV-217016r639663_rule

Vulnerability Number

V-217016

Group Title

SRG-NET-000019-RTR-000007

Rule Version

JUNI-RT-000060

Severity

CAT III

CCI(s)

• CCI-001414 - The information system enforces approved authorizations for controlling the flow of information between interconnected systems based on organization-defined information flow control policies.

Weight

10

Fix Recommendation

Disable all inactive interfaces as shown below.

[edit interfaces]
set ge-1/1/0 disable

Check Contents

Review the router configuration and verify that inactive interfaces have been disabled as shown below.

interfaces {
ge-1/1/0 {
disable;
unit 0 {
}
}

If an interface is not being used but is configured or enabled, this is a finding.

Vulnerability Number

V-217016

Documentable

False

Rule Version

JUNI-RT-000060

Severity Override Guidance

Review the router configuration and verify that inactive interfaces have been disabled as shown below.

interfaces {
ge-1/1/0 {
disable;
unit 0 {
}
}

If an interface is not being used but is configured or enabled, this is a finding.

Check Content Reference

M

Target Key

4032

Comments