AMLS-L3-000290 - The Arista Multilayer Switch must configure the maximum hop limit value to at least 32.

Information

The Neighbor Discovery protocol allows a hop limit value to be advertised by routers in a Router Advertisement message to be used by hosts instead of the standardized default value. If a very small value was configured and advertised to hosts on the LAN segment, communications would fail due to the hop limit reaching zero before the packets sent by a host reached their destination.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Configure the router maximum hop limit value to at least 32.

From the interface configuration mode, enter:

ipv6 nd ra hop-limit 32

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Arista_MLS_DCS-7000_Series_Y24M07_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7a., CAT|II, CCI|CCI-001097, Rule-ID|SV-220133r539012_rule, STIG-ID|AMLS-L3-000290, STIG-Legacy|SV-75385, STIG-Legacy|V-60927, Vuln-ID|V-220133

Plugin: Arista

Control ID: 439122930b409d4cd1bb42368bd5aca6c37930048ed365e2392189bc2a5ca6d7