STIGQter: STIG Summary: HP FlexFabric Switch RTR Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 24 Jul 2020:

The HP FlexFabric Switch must disable Protocol Independent Multicast (PIM) on all interfaces that are not required to support multicast routing.

DISA Rule

SV-80625r1_rule

Vulnerability Number

V-66135

Group Title

SRG-NET-000019-RTR-000003

Rule Version

HFFS-RT-000024

Severity

CAT II

CCI(s)

CCI-001414 - The information system enforces approved authorizations for controlling the flow of information between interconnected systems based on organization-defined information flow control policies.

Weight

Fix Recommendation

Disable PIM on the HP FlexFabric Switch interfaces that should not have it enabled:

[HP-GigabitEthernet0/1] undo pim sm

Check Contents

Review the multicast topology diagram and determine which HP FlexFabric Switch interfaces should have Protocol Independent Multicast enabled. Disable PIM on interfaces that should not have it enabled.

If PIM is enabled interfaces that are not required to support multicast routing, this is a finding.

[HP]display current-configuration interface
interface GigabitEthernet0/1
port link-mode route
pim sm
ip address 192.168.10.1 255.255.255.0
packet-filter 3010 inbound

[HP FlexFabric SwitchD] display pim neighbor
Total Number of Neighbors = 3
Neighbor Interface Uptime Expires Dr-Priority
192.168.10.2 GE0/1 00:02:22 00:01:27 1

The HP FlexFabric Switch must disable Protocol Independent Multicast (PIM) on all interfaces that are not required to support multicast routing.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key

Comments