STIGQter: STIG Summary: Dell OS10 Switch Layer 2 Switch Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 10 Dec 2024:

The Dell OS10 Switch must have all user-facing or untrusted ports configured as access switch ports.

DISA Rule

SV-269970r1052296_rule

Vulnerability Number

V-269970

Group Title

SRG-NET-000512-L2S-000011

Rule Version

OS10-L2S-000250

Severity

CAT II

CCI(s)

CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

Disable trunking on all user-facing or untrusted switch ports:

OS10(conf-if-eth1/1/1)# interface ethernet 1/1/2
OS10(conf-if-eth1/1/2)# switchport mode access
OS10(conf-if-eth1/1/2)# switchport access vlan 201

Check Contents

Review the Dell OS10 Switch configurations and examine all user-facing or untrusted switch ports. The example below shows both trunk port and user-facing access ports:

interface ethernet 1/1/1
no shutdown
switchport mode trunk
switchport access vlan 99
switchport trunk allowed vlan 2100-2102
!
interface ethernet1/1/2
no shutdown
switchport access vlan 201
flowcontrol receive off
!
interface ethernet1/1/3
no shutdown
switchport access vlan 200
flowcontrol receive off

Note: The default switchport mode is access, so it will not be displayed when viewing the configuration of the user-facing ports.

If any of the user-facing switch ports are configured as a trunk, this is a finding.

The Dell OS10 Switch must have all user-facing or untrusted ports configured as access switch ports.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key