The system must be configured with a default gateway for IPv6 if the system uses IPv6, unless the system is a router.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-227003	GEN005570	SV-227003r603265_rule		Medium

Description
If a system has no default gateway defined, the system is at increased risk of man-in-the-middle, monitoring, and Denial of Service attacks.

STIG	Date
Solaris 10 SPARC Security Technical Implementation Guide	2020-12-04

Details

Check Text ( C-29165r485348_chk )
Check for a default route for IPv6. # netstat -f inet6 -r | grep default If the system uses IPv6, and no results are returned, this is a finding.

Fix Text (F-29153r485349_fix)
Add a default route for IPv6. # route add -inet6 default Add this command to an init script.