STIGQter: STIG Summary: HP FlexFabric Switch L2S Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 24 Jul 2020:

The HP FlexFabric Switch must implement Rapid STP where VLANs span multiple switches with redundant links.

DISA Rule

SV-80567r1_rule

Vulnerability Number

V-66077

Group Title

SRG-NET-000512-L2S-000003

Rule Version

HFFS-L2-000020

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure Rapid STP to be implemented at the access and distribution layers where VLANs span multiple switches.

Check Contents

In cases where VLANs do not span multiple switches, it is a best practice to not implement STP. Avoiding the use of STP will provide the most deterministic and highly available network topology. If STP is required, then review the HP FlexFabric Switch configuration to verify that Rapid STP has been implemented.

If Rapid STP has not been implemented where STP is required, this is a finding.

[HP]display stp vlan X

Vulnerability Number

V-66077

Documentable

False

Rule Version

HFFS-L2-000020

Severity Override Guidance

In cases where VLANs do not span multiple switches, it is a best practice to not implement STP. Avoiding the use of STP will provide the most deterministic and highly available network topology. If STP is required, then review the HP FlexFabric Switch configuration to verify that Rapid STP has been implemented.

If Rapid STP has not been implemented where STP is required, this is a finding.

[HP]display stp vlan X

Check Content Reference

M

Target Key

2977

Comments