The system must be configured with a default gateway for IPv6 if the system uses IPv6, unless the system is a router.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22490	GEN005570	SV-26805r1_rule	ECSC-1	Medium

Description
If a system has no default gateway defined, the system is at increased risk of man-in-the-middle, monitoring, and Denial of Service attacks.

STIG	Date
HP-UX 11.31 Security Technical Implementation Guide	2018-09-14

Details

Check Text ( C-27794r1_chk )
Check for a default route for IPv6: # netstat -f inet6 -r | grep default If the system uses IPv6 and no results are returned, this is a finding.

Fix Text (F-24050r1_fix)
Add a default route for IPv6. Edit /etc/rc.config.d/netconf-ipv6 Add an IPV6_GATEWAY[0]="" Restart the system to apply the new default gateway setting.