STIGQter: STIG Summary: Router Security Requirements Guide Version: 4 Release: 2 Benchmark Date: 23 Apr 2021:

The router must be configured to advertise a hop limit of at least 32 in Router Advertisement messages for IPv6 stateless auto-configuration deployments.

DISA Rule

SV-220144r604135_rule

Vulnerability Number

V-220144

Group Title

SRG-NET-000512

Rule Version

SRG-NET-000512-RTR-000012

Severity

CAT III

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure the router to advertise a hop limit of at least 32 in Router Advertisement messages.

Check Contents

This requirement is not applicable for the DODIN Backbone.

Review the router configuration to determine if the hop limit has been configured for Router Advertisement messages.

If it has been configured and has not been set to at least 32, it is a finding.

Vulnerability Number

V-220144

Documentable

False

Rule Version

SRG-NET-000512-RTR-000012

Severity Override Guidance

This requirement is not applicable for the DODIN Backbone.

Review the router configuration to determine if the hop limit has been configured for Router Advertisement messages.

If it has been configured and has not been set to at least 32, it is a finding.

Check Content Reference

M

Target Key

2917

Comments