GEN005570 - The system must be configured with a default gateway for IPv6 if the system uses IPv6, unless the system is a router.

Information

If a system has no default gateway defined, the system is at increased risk of man-in-the-middle, monitoring, and Denial of Service attacks.

Solution

Add a default route for IPv6.
# route add -inet6 default <gateway>
Add this command to an init script.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_SPARC_V2R4_STIG.zip

Item Details

Audit Name: DISA STIG Solaris 10 SPARC v2r4

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-227003r603265_rule, STIG-ID|GEN005570, STIG-Legacy|SV-26804, STIG-Legacy|V-22490, Vuln-ID|V-227003

Plugin: Unix

Control ID: 03168675857190e91f1a109ec9e2265d6320d7ff00f906611a094150debf96f0