STIGQter: STIG Summary: HP FlexFabric Switch L2S Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 24 Jul 2020:

The HP FlexFabric Switch must not use the default VLAN for management traffic.

DISA Rule

SV-80581r1_rule

Vulnerability Number

V-66091

Group Title

SRG-NET-000512-L2S-000010

Rule Version

HFFS-L2-000027

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure the HP FlexFabric Switch for management access to use a VLAN other than the default VLAN.

interface Vlan-interface xxxx
description MGMT VLAN
ip address xxx.xxx.xxx.xxx <mask>

Check Contents

Review the HP FlexFabric Switch configuration and verify that the default VLAN is not used to access the switch for management.

If the default VLAN is being used to access the HP FlexFabric Switch, this is a finding.

<HP>display vlan 1

VLAN ID: 1
VLAN type: Static
Route interface: Configured
Description: VLAN 0001
Name: VLAN 0001
Tagged ports: None
Untagged ports:
GigabitEthernet1/0/1 GigabitEthernet1/0/2
GigabitEthernet1/0/3 GigabitEthernet1/0/4
GigabitEthernet1/0/5 GigabitEthernet1/0/6
GigabitEthernet1/0/7 GigabitEthernet1/0/8

Vulnerability Number

V-66091

Documentable

False

Rule Version

HFFS-L2-000027

Severity Override Guidance

Review the HP FlexFabric Switch configuration and verify that the default VLAN is not used to access the switch for management.

If the default VLAN is being used to access the HP FlexFabric Switch, this is a finding.

<HP>display vlan 1

VLAN ID: 1
VLAN type: Static
Route interface: Configured
Description: VLAN 0001
Name: VLAN 0001
Tagged ports: None
Untagged ports:
GigabitEthernet1/0/1 GigabitEthernet1/0/2
GigabitEthernet1/0/3 GigabitEthernet1/0/4
GigabitEthernet1/0/5 GigabitEthernet1/0/6
GigabitEthernet1/0/7 GigabitEthernet1/0/8

Check Content Reference

M

Target Key

2977

Comments