Proxy Neighbor Discovery Protocol (NDP) must not be enabled on the system.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-22544 | GEN007760 | SV-38925r1_rule | ECSC-1 | Medium |
| Description |
|---|
| Proxy Neighbor Discovery Protocol (NDP) allows a system to respond to NDP requests on one interface on behalf of hosts connected to another interface. If this function is enabled when not required, addressing information may be leaked between the attached network segments. |
| STIG | Date |
|---|---|
| AIX 5.3 SECURITY TECHNICAL IMPLEMENTATION GUIDE | 2014-10-03 |
Details
| Check Text ( C-37910r1_chk ) |
|---|
| If the system does not support proxy NDP, this is not applicable. Determine if the system has proxy NDP enabled. If IPv6 is enabled, determine if any non-local published NDP entries exist on the system. # ndp -a If any NDP entries contain non-local published entries, this is a finding. |
| Fix Text (F-33168r1_fix) |
|---|
| Remove non-local published NDP entries from the system. # ndp -d Check system startup scripts for commands publishing NDP entries (such as "ndp -s |