STIGQter: STIG Summary: Layer 2 Switch Security Requirements Guide Version: 3 Release: 4 Benchmark Date: 01 Apr 2026:

The layer 2 switch must have all trunk links enabled statically.

DISA Rule

SV-206665r1188390_rule

Vulnerability Number

V-206665

Group Title

SRG-NET-000512

Rule Version

SRG-NET-000512-L2S-000005

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Configure the switch to enable trunk links statically.

Check Contents

Review the switch configuration to verify that trunk negotiation is disabled by statically configuring all trunk links. Configuring a command to manually disable negotiation may also be required for some switch platforms.

If trunk negotiation is enabled on any interface, this is a finding.

Vulnerability Number

V-206665

Documentable

False

Rule Version

SRG-NET-000512-L2S-000005

Severity Override Guidance

Review the switch configuration to verify that trunk negotiation is disabled by statically configuring all trunk links. Configuring a command to manually disable negotiation may also be required for some switch platforms.

If trunk negotiation is enabled on any interface, this is a finding.

Check Content Reference

M

Target Key

2913