STIGQter STIGQter: STIG Summary: Dell OS10 Switch Layer 2 Switch Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 10 Dec 2024:

The Dell OS10 Switch must have Storm Control configured on all host-facing switch ports.

DISA Rule

SV-269962r1052327_rule

Vulnerability Number

V-269962

Group Title

SRG-NET-000512-L2S-000001

Rule Version

OS10-L2S-000160

Severity

CAT III

CCI(s)

Weight

10

Fix Recommendation

Configure the Dell OS10 Switch to enable storm control is on all host-facing switch ports as shown in the example below:

OS10(config)# interface ethernet 1/1/1
OS10(conf-if-eth1/1/1)# storm-control broadcast 1000
OS10(conf-if-eth1/1/1)# storm-control multicast rate 100 Mbps
OS10(conf-if-eth1/1/1)# storm-control unknown-unicast rate 600 Kbps

Check Contents

Review the Dell OS10 Switch configuration to verify that storm control is enabled on all host-facing switch ports.

For each host-facing switch port:

interface ethernet1/1/1
switchport access vlan 100
storm-control broadcast 1000
storm-control multicast rate 100 Mbps
storm-control unknown-unicast rate 600 Kbps

Note that the rates may be entered in bits per second or packets per second units.

If the switch has not enabled storm control on all host-facing switch ports, this is a finding.

Vulnerability Number

V-269962

Documentable

False

Rule Version

OS10-L2S-000160

Severity Override Guidance

Review the Dell OS10 Switch configuration to verify that storm control is enabled on all host-facing switch ports.

For each host-facing switch port:

interface ethernet1/1/1
switchport access vlan 100
storm-control broadcast 1000
storm-control multicast rate 100 Mbps
storm-control unknown-unicast rate 600 Kbps

Note that the rates may be entered in bits per second or packets per second units.

If the switch has not enabled storm control on all host-facing switch ports, this is a finding.

Check Content Reference

M

Target Key

5667