IBM AIX 7.x Security Technical Implementation Guide

The IBM AIX 7.x Security Technical Implementation Guide (V3 R4) has 282 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

282STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R4

CurrentPublished Wed Sep 30 2026

AIX must be configured with a default gateway for IPv6 if the system uses IPv6 unless the system is a router.

IBM AIX 7.x Security Technical Implementation Guide

Assessment Title

Rule Text

AIX must be configured with a default gateway for IPv6 if the system uses IPv6 unless the system is a router.

Description

Discussion Text

If a system has no default gateway defined, the system is at increased risk of man-in-the-middle, monitoring, and Denial of Service attacks.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-215264

Rule

SV-215264r1268251_rule

Severity

medium

Rule Version

AIX7-00-002065

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

If the system is a router, this is Not Applicable. 

If the system does not use IPv6, this is Not Applicable. 

Determine if the system has a default route configured for IPv6 by running: 

# netstat -r | grep default 
default            10.11.20.1       UG        1      1823 en0      -      -

If a default route is not defined, this is a finding.

Implementation Procedure

Fix Text

Configure an IPv6 default route on the system: 
# smitty route

STIG check 93 of 282 in the IBM AIX 7.x STIG checklist

← Previous · V-215263IP forwarding for IPv4 must not be enabled on AIX unless the system is a router.Next · V-215265 →AIX must not have IP forwarding for IPv6 enabled unless the system is an IPv6 router.