STIGQter: STIG Summary: Cisco IOS-XE Switch RTR Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Apr 2021:

The Cisco switch must be configured to advertise a hop limit of at least 32 in Switch Advertisement messages for IPv6 stateless auto-configuration deployments.

DISA Rule

SV-237752r648780_rule

Vulnerability Number

V-237752

Group Title

SRG-NET-000512-RTR-000012

Rule Version

CISC-RT-000236

Severity

CAT III

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure the switch to advertise a hop limit of at least 32 in Router Advertisement messages as shown in the example.

SW1(config)#ipv6 hop-limit 128

Check Contents

Review the switch configuration to determine if the hop limit has been configured for Router Advertisement messages as shown in the example.

ipv6 hop-limit 128

If hop-limit has been configured and has not been set to at least 32, it is a finding.

Vulnerability Number

V-237752

Documentable

False

Rule Version

CISC-RT-000236

Severity Override Guidance

Review the switch configuration to determine if the hop limit has been configured for Router Advertisement messages as shown in the example.

ipv6 hop-limit 128

If hop-limit has been configured and has not been set to at least 32, it is a finding.

Check Content Reference

M

Target Key

4074

Comments