STIGQter: STIG Summary: Dell OS10 Switch Layer 2 Switch Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 10 Dec 2024:

The Dell OS10 Switch must not have any switch ports assigned to the native VLAN.

DISA Rule

SV-269971r1052299_rule

Vulnerability Number

V-269971

Group Title

SRG-NET-000512-L2S-000013

Rule Version

OS10-L2S-000270

Severity

CAT III

CCI(s)

CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

Configure all access switch ports to an access VLAN other than the native VLAN.

Check Contents

Review the Dell OS10 Switch configurations and examine all access switch ports. Verify that they do not belong to the native VLAN of the trunk ports. The native VLAN on trunk ports is set by the switchport access vlan command on those ports. In the example below, the native VLAN is 99 and the access ports must be configured to other VLANs.

interface ethernet 1/1/1
no shutdown
switchport mode trunk
switchport access vlan 99
switchport trunk allowed vlan 2100-2102
!
interface ethernet1/1/2
no shutdown
switchport access vlan 201
flowcontrol receive off
!
interface ethernet1/1/3
no shutdown
switchport access vlan 200
flowcontrol receive off

If any access switch ports have been assigned to the same VLAN ID as the native VLAN, this is a finding.

The Dell OS10 Switch must not have any switch ports assigned to the native VLAN.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key