UCF STIG Viewer Logo

The system must be configured with a default gateway for IPv6 if the system uses IPv6, unless the system is a router.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22490 GEN005570 SV-26804r1_rule ECSC-1 Medium
Description
If a system has no default gateway defined, the system is at increased risk of man-in-the-middle, monitoring, and Denial of Service attacks.
STIG Date
SOLARIS 9 SPARC SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-10-01

Details

Check Text ( C-27793r1_chk )
Check for a default route for IPv6.
# netstat -f inet6 -r | grep default
If the system uses IPv6, and no results are returned, this is a finding.
Fix Text (F-24049r1_fix)
Add a default route for IPv6.
# route add -inet6 default
Add this command to an init script.