NET-IPV6-004 – IPv6 Router Advertisements must be suppressed.
Details Router advertisements must be suppressed on all external-facing IPv6-enabled interfaces. Many of the known attacks in stateless autoconfiguration are...
- Home
- Security Hardening
- DISA STIG Cisco Perimeter Router V8R32
DISA STIG Cisco Perimeter Router V8R32
NET-IPV6-006 – Undetermined transport is not blocked
Details The system administrator will ensure the undetermined transport packet is blocked at the perimeter in an IPv6 enclave by...NET-IPV6-008 – IPV6 Bogons are not blocked – ‘deny ipv6 3FFE::/16 any log’
Details The IAO/NSO will ensure IPv6 6bone address space is blocked on the ingress and egress filter, (3FFE–/16). The decommissioned...NET-IPV6-008 – IPV6 Bogons are not blocked – ‘deny ipv6 any 3FFE::/16 log’
Details The IAO/NSO will ensure IPv6 6bone address space is blocked on the ingress and egress filter, (3FFE–/16). The decommissioned...NET-IPV6-008 – IPV6 Bogons are not blocked – ‘Ingress IPv6 traffic-filter’
Details The IAO/NSO will ensure IPv6 6bone address space is blocked on the ingress and egress filter, (3FFE–/16). The decommissioned...NET-IPV6-010 – Inbound ICMPv6 messages are not blocked – ‘deny icmp any any fragments log’
Details The network element can permit inbound ICMPv6 messages Packet-too-big (type 2), Time Exceeded (type 3), Parameter Problem (type 4),...NET-IPV6-010 – Inbound ICMPv6 messages are not blocked – ‘deny ipv6 any any log’
Details The network element can permit inbound ICMPv6 messages Packet-too-big (type 2), Time Exceeded (type 3), Parameter Problem (type 4),...NET-IPV6-010 – Inbound ICMPv6 messages are not blocked – ‘permit icmp any any nd-na’
Details The network element can permit inbound ICMPv6 messages Packet-too-big (type 2), Time Exceeded (type 3), Parameter Problem (type 4),...NET-IPV6-010 – Inbound ICMPv6 messages are not blocked – ‘permit icmp any any nd-ns’
Details The network element can permit inbound ICMPv6 messages Packet-too-big (type 2), Time Exceeded (type 3), Parameter Problem (type 4),...NET-IPV6-010 – Inbound ICMPv6 messages are not blocked – ‘permit icmp any any packet-too-big’
Details The network element can permit inbound ICMPv6 messages Packet-too-big (type 2), Time Exceeded (type 3), Parameter Problem (type 4),...