← Back to RUCKUS ICX Router Security Technical Implementation Guide

V-273633

CAT II (Medium)

The RUCKUS ICX router must be configured to have Internet Control Message Protocol (ICMP) redirects disabled on all external interfaces.

Rule ID

SV-273633r1110939_rule

STIG

RUCKUS ICX Router Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-002385

Discussion

The ICMP supports IP traffic by relaying information about paths, routes, and network conditions. Routers automatically send ICMP messages under a wide variety of conditions. Redirect ICMP messages are commonly used by attackers for network mapping and diagnosis.

Check Content

The RUCKUS ICX router disables ICMP redirect messages by default.  

Review the configuration to verify the following command is not present:
ip icmp redirects

If the command above is present, this is a finding.

Fix Text

Disable ICMP redirect messages:

ICX(config)#no ip icmp redicts