STIGQter: STIG Summary: Dell OS10 Switch Layer 2 Switch Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 10 Dec 2024:

The Dell OS10 Switch must have Unknown Unicast Flood Blocking (UUFB) enabled.

DISA Rule

SV-269958r1052260_rule

Vulnerability Number

V-269958

Group Title

SRG-NET-000362-L2S-000024

Rule Version

OS10-L2S-000120

Severity

CAT II

CCI(s)

• CCI-002385 - Protect against or limit the effects of organization-defined types of denial of service events.

Weight

10

Fix Recommendation

Configure the Dell OS10 Switch to enable storm control is on all host-facing switch ports as shown in the example below:

OS10(config)# interface ethernet 1/1/1
OS10(conf-if-eth1/1/1)# storm-control unknown-unicast 1

Check Contents

Review the Dell OS10 Switch configuration to verify that unknown unicast traffic is blocked by storm control is on all host-facing switch ports.

For each host-facing switch port:

interface ethernet1/1/1
switchport access vlan 100
storm-control unknown-unicast 1

If the switch has not enabled unknown unicast storm control on all host-facing switch ports, this is a finding.

Vulnerability Number

V-269958

Documentable

False

Rule Version

OS10-L2S-000120

Severity Override Guidance

Review the Dell OS10 Switch configuration to verify that unknown unicast traffic is blocked by storm control is on all host-facing switch ports.

For each host-facing switch port:

interface ethernet1/1/1
switchport access vlan 100
storm-control unknown-unicast 1

If the switch has not enabled unknown unicast storm control on all host-facing switch ports, this is a finding.

Check Content Reference

M

Target Key

5667