3.1.3.3 ndpd-router

Information

This entry starts ndpd-router on system startup. This manages the Neighbor Discovery Protocol (NDP) for non kernel activities.

It receives Router Solicitations and sends Router Advertisements. It can also exchange routing information using the RIPng protocol.

Rationale:

The ndpd-router manages NDP for non-kernel activities. Unless the server utilizes IPv6, this is not required and should be disabled.

Impact:

This service is not needed unless the AIX host is actively exchanging routing information with IPv6 routers.

See: manpage AIX 7.1 ndpd-router Daemon

Solution

In /etc/rc.tcpip, comment out the ndpd-router entry:

chrctcp -d ndpd-router

Default Value:

Disabled

See Also

https://workbench.cisecurity.org/files/4119

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Unix

Control ID: 6060a5fb58800f3a1ffc3bfa7b6bcd7674877f7e2dac1468b7a0c935266e2160