STIGQter: STIG Summary: HP FlexFabric Switch L2S Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 24 Jul 2020:

The HP FlexFabric Switch must have all disabled switch ports assigned an unused VLAN.

DISA Rule

SV-80575r1_rule

Vulnerability Number

V-66085

Group Title

SRG-NET-000512-L2S-000007

Rule Version

HFFS-L2-000024

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Assign all switch ports not in use to an inactive VLAN.

[HP-vlanX]port GigabitEthernet 1/0/1 to GigabitEthernet 1/0/48

Check Contents

Review the HP FlexFabric Switch configurations and examine all access switch ports. Each access switch port not in use should have membership to an inactive VLAN that is not used for any purpose and is not allowed on any trunk links.

If there are any access switch ports not in use and not in an inactive VLAN, this is a finding.

<HP>display vlan X
VLAN ID: X
VLAN type: Static
Route interface: Configured:
Description: VLAN 000X
Name: VLAN 000X
Tagged ports: None
Untagged ports:
GigabitEthernet1/0/1 GigabitEthernet1/0/2
GigabitEthernet1/0/3 GigabitEthernet1/0/4

Vulnerability Number

V-66085

Documentable

False

Rule Version

HFFS-L2-000024

Severity Override Guidance

Review the HP FlexFabric Switch configurations and examine all access switch ports. Each access switch port not in use should have membership to an inactive VLAN that is not used for any purpose and is not allowed on any trunk links.

If there are any access switch ports not in use and not in an inactive VLAN, this is a finding.

<HP>display vlan X
VLAN ID: X
VLAN type: Static
Route interface: Configured:
Description: VLAN 000X
Name: VLAN 000X
Tagged ports: None
Untagged ports:
GigabitEthernet1/0/1 GigabitEthernet1/0/2
GigabitEthernet1/0/3 GigabitEthernet1/0/4

Check Content Reference

M

Target Key

2977

Comments