The RUCKUS ICX router must be configured to have Internet Control Message Protocol (ICMP) redirects disabled on all external interfaces.

The ICMP supports IP traffic by relaying information about paths, routes, and network conditions. Routers automatically send ICMP messages under a wide variety of conditions. Redirect ICMP messages are commonly used by attackers for network mapping and diagnosis.

The RUCKUS ICX router disables ICMP redirect messages by default.

Review the configuration to verify the following command is not present: ip icmp redirects

If the command above is present, this is a finding.

Disable ICMP redirect messages:

ICX(config)#no ip icmp redicts