STIGQter: STIG Summary: RUCKUS ICX Layer 2 Switch Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX switch must have Root Protect enabled on all switch ports connecting to access layer switches and hosts.

DISA Rule

SV-273677r1111058_rule

Vulnerability Number

V-273677

Group Title

SRG-NET-000362-L2S-000021

Rule Version

RCKS-L2S-000090

Severity

CAT III

CCI(s)

• CCI-002385 - Protect against or limit the effects of organization-defined types of denial of service events.

Weight

10

Fix Recommendation

Configure ports connected to access switches and hosts to have Root Protect enabled.

ICX(config--if-e1000-x/x/x)# spanning-tree root-protect

Check Contents

Review port configuration to verify that Root Protect is enabled on ports connecting to access layer switches and hosts.

interface ethernet x/x/x
spanning-tree root-protect

If Root Protect is not configured on ports connecting to access layer switches and hosts, this is a finding.

Vulnerability Number

V-273677

Documentable

False

Rule Version

RCKS-L2S-000090

Severity Override Guidance

Review port configuration to verify that Root Protect is enabled on ports connecting to access layer switches and hosts.

interface ethernet x/x/x
spanning-tree root-protect

If Root Protect is not configured on ports connecting to access layer switches and hosts, this is a finding.

Check Content Reference

M

Target Key

5697