STIGQter STIGQter: STIG Summary: Layer 2 Switch Security Requirements Guide Version: 1 Release: 6 Benchmark Date: 24 Jan 2020:

The layer 2 switch must have all disabled switch ports assigned to an unused VLAN.

DISA Rule

SV-76691r1_rule

Vulnerability Number

V-62201

Group Title

SRG-NET-000512

Rule Version

SRG-NET-000512-L2S-000007

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Assign all switch ports not in use to an inactive VLAN.

Note: Switch ports configured for 802.1x are exempt from this requirement.

Check Contents

Review the switch configurations and examine all access switch ports. Each access switch port not in use should have membership to an inactive VLAN that is not used for any purpose and is not allowed on any trunk links.

If there are any access switch ports not in use and not in an inactive VLAN, this is a finding.

Note: Switch ports configured for 802.1x are exempt from this requirement.

Vulnerability Number

V-62201

Documentable

False

Rule Version

SRG-NET-000512-L2S-000007

Severity Override Guidance

Review the switch configurations and examine all access switch ports. Each access switch port not in use should have membership to an inactive VLAN that is not used for any purpose and is not allowed on any trunk links.

If there are any access switch ports not in use and not in an inactive VLAN, this is a finding.

Note: Switch ports configured for 802.1x are exempt from this requirement.

Check Content Reference

M

Target Key

2917

Comments