Title

The RUCKUS ICX router must be configured to have Internet Control Message Protocol (ICMP) redirects disabled on all external interfaces. (Cat II impact)

Discussion

The ICMP supports IP traffic by relaying information about paths, routes, and network conditions. Routers automatically send ICMP messages under a wide variety of conditions. Redirect ICMP messages are commonly used by attackers for network mapping and diagnosis.

Check Content

The RUCKUS ICX router disables ICMP redirect messages by default. Review the configuration to verify the following command is not present: ip icmp redirects If the command above is present, this is a finding.

Fix Text

Disable ICMP redirect messages: ICX(config)#no ip icmp redicts

Additional Identifiers

Rule ID: SV-273633r1110939_rule

Vulnerability ID: V-273633

Group Title: SRG-NET-000362-RTR-000115

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.