STIGQter: STIG Summary: Cisco IOS XE Router RTR Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 23 Apr 2021:

The Cisco router must be configured to advertise a hop limit of at least 32 in Router Advertisement messages for IPv6 stateless auto-configuration deployments.

DISA Rule

SV-230039r647454_rule

Vulnerability Number

V-230039

Group Title

SRG-NET-000512-RTR-000012

Rule Version

CISC-RT-000236

Severity

CAT III

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure the router to advertise a hop limit of at least 32 in Router Advertisement messages.

R1(config)#ipv6 hop-limit 128

Check Contents

Review the router configuration to determine if the hop limit has been configured for Router Advertisement messages as shown in the example.

ipv6 hop-limit 128

If it has been configured and has not been set to at least 32, it is a finding.

Vulnerability Number

V-230039

Documentable

False

Rule Version

CISC-RT-000236

Severity Override Guidance

Review the router configuration to determine if the hop limit has been configured for Router Advertisement messages as shown in the example.

ipv6 hop-limit 128

If it has been configured and has not been set to at least 32, it is a finding.

Check Content Reference

M

Target Key

4028

Comments