STIGQter: STIG Summary: RUCKUS ICX Layer 2 Switch Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX switch must be configured to disable nonessential capabilities.

DISA Rule

SV-273672r1110975_rule

Vulnerability Number

V-273672

Group Title

SRG-NET-000131-L2S-000014

Rule Version

RCKS-L2S-000010

Severity

CAT II

CCI(s)

CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

Fix Recommendation

Remove unneeded services and functions from the switch.

Router# configure terminal

Router(config)# no telnet server enable vlan 1

Router(config)# no tftp-server

Router(config)#web-management disable

Router(config)# vlan xxx (xxx = vlan ID)

Router(config-vlan-1)#no webauth

Router(config)#write memory

Check Contents

Review the switch configuration to determine if services or functions not required for operation, or not related to switch functionality, are enabled.

1. Check that web authentication is enabled.
Router#show webauth
The result returned will be blank.

2. Check that web services are enabled.
Router#show web
HTTP server status: Disabled
HTTPS server status: Disabled
No web connection.

3. Check if the telnet service is enabled.
Router#show telnet
Telnet server status: Disabled
Telnet connections:

4. Check if the tftp service is enabled.
Router#show running-config | include tftp
no tftp client enable
tftp disable

If unnecessary services and functions are enabled on the switch, this is a finding.

The RUCKUS ICX switch must be configured to disable nonessential capabilities.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key