STIGQter STIGQter: STIG Summary: Dell OS10 Switch Layer 2 Switch Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 10 Dec 2024:

The Dell OS10 Switch must not use the default VLAN for management traffic.

DISA Rule

SV-269969r1052293_rule

Vulnerability Number

V-269969

Group Title

SRG-NET-000512-L2S-000010

Rule Version

OS10-L2S-000240

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the switch for management access to use a VLAN other than the default VLAN:

OS10(config)# interface vlan 30
OS10(conf-if-vl-30)# description "Management VLAN"
OS10(conf-if-vl-30)# ip address 10.10.1.1/24
OS10(conf-if-vl-30)# no shutdown

Check Contents

Review the OS10 switch configuration and verify that the default VLAN is not used to access the switch for management:

interface vlan30
description "Management VLAN"
no shutdown
ip address 10.10.1.1/24

If the default VLAN is being used to access the switch, this is a finding.

Vulnerability Number

V-269969

Documentable

False

Rule Version

OS10-L2S-000240

Severity Override Guidance

Review the OS10 switch configuration and verify that the default VLAN is not used to access the switch for management:

interface vlan30
description "Management VLAN"
no shutdown
ip address 10.10.1.1/24

If the default VLAN is being used to access the switch, this is a finding.

Check Content Reference

M

Target Key

5667