STIGQter: STIG Summary: Layer 2 Switch Security Requirements Guide Version: 3 Release: 4 Benchmark Date: 01 Apr 2026:

The layer 2 switch must not use the default VLAN for management traffic.

DISA Rule

SV-206669r385561_rule

Vulnerability Number

V-206669

Group Title

SRG-NET-000512

Rule Version

SRG-NET-000512-L2S-000010

Severity

CAT II

CCI(s)

CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

Configure the switch for management access to use a VLAN other than the default VLAN.

Check Contents

Review the switch configuration and verify that the default VLAN is not used to access the switch for management.

If the default VLAN is being used to access the switch, this is a finding.

Vulnerability Number

V-206669

Documentable

False

Rule Version

SRG-NET-000512-L2S-000010

Severity Override Guidance

Review the switch configuration and verify that the default VLAN is not used to access the switch for management.

If the default VLAN is being used to access the switch, this is a finding.

Check Content Reference

Target Key

2913