GEN005560 - The system must be configured with a default gateway for IPv4 if the system uses IPv4, unless the system is a router.

Information

If a system has no default gateway defined, the system is at increased risk of man-in-the-middle, monitoring, and Denial of Service attacks.

Solution

Set a default gateway for IPv4.
# smitty route
OR
# route add 0 < ip address of gateway >

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Audit Name: DISA AIX 5.3 STIG v1r2

Category: ACCESS CONTROL

References: 800-53|AC-4, CAT|II, CCI|CCI-000366, Rule-ID|SV-39217r1_rule, STIG-ID|GEN005560, Vuln-ID|V-4397

Plugin: Unix

Control ID: a622be9f46e4958a2b8705eb8f7c212c6c435bf666828bb06b10e95d22230cfd