STIGQter: STIG Summary: Dell OS10 Switch Router Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Apr 2026:

The Dell OS10 Router must be configured to have Gratuitous ARP disabled on all external interfaces.

DISA Rule

SV-269887r1052046_rule

Vulnerability Number

V-269887

Group Title

SRG-NET-000362-RTR-000111

Rule Version

OS10-RTR-000620

Severity

CAT II

CCI(s)

• CCI-002385 - Protect against or limit the effects of organization-defined types of denial of service events.

Weight

10

Fix Recommendation

Configure the Dell OS10 Switch to disable gratuitous arp on all external interfaces as shown in the example below:

OS10(config)# interface ethernet 1/1/1
OS10(conf-if-eth1/1/1)# no ip arp gratuitous update

Check Contents

Review the Dell OS10 Switch configuration to determine if gratuitous ARP is disabled on all external interfaces.

Verify that gratuitous ARP has not been enabled on each external interface by checking that the following has not been configured:

ip arp gratuitous update

If gratuitous ARP is enabled on any external interface, this is a finding.

Vulnerability Number

V-269887

Documentable

False

Rule Version

OS10-RTR-000620

Severity Override Guidance

Review the Dell OS10 Switch configuration to determine if gratuitous ARP is disabled on all external interfaces.

Verify that gratuitous ARP has not been enabled on each external interface by checking that the following has not been configured:

ip arp gratuitous update

If gratuitous ARP is enabled on any external interface, this is a finding.

Check Content Reference

M

Target Key

5668