STIGQter: STIG Summary: Arista MLS EOS 4.X Router Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 02 Apr 2025:

The Arista router must be configured to have all inactive interfaces disabled.

DISA Rule

SV-256001r882345_rule

Vulnerability Number

V-256001

Group Title

SRG-NET-000019-RTR-000007

Rule Version

ARST-RT-000150

Severity

CAT III

CCI(s)

• CCI-001414 - Enforce approved authorizations for controlling the flow of information between connected systems based on organization-defined information flow control policies.

Weight

10

Fix Recommendation

Delete inactive sub-interfaces and disable and delete the configuration of any inactive ports on the router.

Deleting the sub-interface:

router(config)#no interface Ethernet8.100

Disabling the interface:

router(config)#interface Ethernet 8-10
router(config-if-Et8-10)#shutdown

Resetting the interface to the default-configuration:

router(config)#default interface Ethernet 8

Check Contents

Review the Arista router configuration.

Verify the interfaces and sub-interfaces execute the commands "show ip interface brief" and "show interface status".

Example of a disabled interface:
interface Ethernet 8-10
description The interface is administratively shutdown
shutdown

If an interface is not being used but is configured or enabled, this is a finding.

Vulnerability Number

V-256001

Documentable

False

Rule Version

ARST-RT-000150

Severity Override Guidance

Review the Arista router configuration.

Verify the interfaces and sub-interfaces execute the commands "show ip interface brief" and "show interface status".

Example of a disabled interface:
interface Ethernet 8-10
description The interface is administratively shutdown
shutdown

If an interface is not being used but is configured or enabled, this is a finding.

Check Content Reference

M

Target Key

5513