NET-IPV6-008 - The IAO/NSO will ensure IPv6 6bone address space is blocked on the ingress and egress filter, (3FFE::/16).

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

The decommissioned 6bone allocation (3FFE::/16), RFC 3701 must be blocked. It is no longer a trusted source.

Solution

The administrator will configure the router ACLs to restrict IP addresses that contain any 6bone addresses.

See Also

https://iasecontent.disa.mil/stigs/zip/U_Network_Perimeter_Router_L3_Switch_V8R30_STIG.zip

Item Details

Audit Name: DISA STIG Juniper Perimeter Router V8R30

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7, CAT|II, Rule-ID|SV-20167r1_rule, STIG-ID|NET-IPV6-008, Vuln-ID|V-18610

Plugin: Juniper

Control ID: 21de5d1d943d7179ad7519ce37b326c2be940fe72fad424e4e24496984d45a8f