The HP FlexFabric Switch must configure the maximum hop limit value to at least 32.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-66125 | SRG-NET-000512-RTR-000012 | HFFS-RT-000019 | SV-80615r2_rule | 2020-06-03 | 1 |
| Description |
|---|
| The Neighbor Discovery protocol allows a hop limit value to be advertised by routers in a Router Advertisement message to be used by hosts instead of the standardized default value. If a very small value was configured and advertised to hosts on the LAN segment, communications would fail due to the hop limit reaching zero before the packets sent by a host reached their destination. |
| ℹ️ Check |
|---|
| Review the HP FlexFabric Switch configuration to determine if the maximum hop limit has been configured. If the maximum hop limit is not configured, this is a finding. If it has been configured, then it must be set to at least 32; otherwise this is a finding. [5900CP]display current-configuration | i hop-limit ipv6 hop-limit 255 Note: The default value for the maximum hop limit is 64. |
| ✔️ Fix |
|---|
| If the max hop set is not configured then use the following command to configure it: [HP] ipv6 hop-limit 255 |