STIGQter: STIG Summary: RUCKUS ICX Layer 2 Switch Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX switch must disable the Multiple VLAN Registration Protocol (MVRP).

DISA Rule

SV-273674r1110977_rule

Vulnerability Number

V-273674

Group Title

SRG-NET-000168-L2S-000019

Rule Version

RCKS-L2S-000030

Severity

CAT II

CCI(s)

• CCI-000803 - Implement mechanisms for authentication to a cryptographic module that meet the requirements of applicable laws, Executive Orders, directives, policies, regulations, standards, and guidance for such authentication.

Weight

10

Fix Recommendation

Configure the switch to disable Multiple VLAN Registration Protocol (MVRP).

1. Enter configuration mode:
device1# configure terminal

2. Disable MVRP:
Router(config)#no mvrp enable

Check Contents

Review the switch configuration to verify if MVRP is enabled.

Router(config)#show mvrp
No mvrp configuration found
Router(config)

If MVRP protocol response from show mvrp command indicates Enabled, this is a finding.

Vulnerability Number

V-273674

Documentable

False

Rule Version

RCKS-L2S-000030

Severity Override Guidance

Review the switch configuration to verify if MVRP is enabled.

Router(config)#show mvrp
No mvrp configuration found
Router(config)

If MVRP protocol response from show mvrp command indicates Enabled, this is a finding.

Check Content Reference

M

Target Key

5697