The HP FlexFabric Switch must configure the maximum hop limit value to at least 32.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-66125 | HFFS-RT-000019 | SV-80615r2_rule | CCI-001097 | medium |
| Description | ||||
| The Neighbor Discovery protocol allows a hop limit value to be advertised by routers in a Router Advertisement message to be used by hosts instead of the standardized default value. If a very small value was configured and advertised to hosts on the LAN segment, communications would fail due to the hop limit reaching zero before the packets sent by a host reached their destination. | ||||
| STIG | Date | |||
| HP FlexFabric Switch RTR Security Technical Implementation Guide | 2020-06-03 | |||
Related Frameworks
5 paths across 3 frameworks
Related Frameworks
NIST 800-531 mapping
SC-7
1.00
- DISA · V1R2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1713 mappings
3.13.1
1.00
- DISA · V1R2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
3.13.2
1.00
- DISA · V1R2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
3.13.5
1.00
- DISA · V1R2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-001097
1.00
- DISA · V1R2 · disa_xccdf · related
Details
Check Text (C-80615r2_chk)
Review the HP FlexFabric Switch configuration to determine if the maximum hop limit has been configured.
If the maximum hop limit is not configured, this is a finding.
If it has been configured, then it must be set to at least 32; otherwise this is a finding.
[5900CP]display current-configuration | i hop-limit
ipv6 hop-limit 255
Note: The default value for the maximum hop limit is 64.
Fix Text (F-72201r1_fix)
If the max hop set is not configured then use the following command to configure it:
[HP] ipv6 hop-limit 255