STIGQter: STIG Summary: RUCKUS ICX Layer 2 Switch Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX switch must have Storm Control configured on all host-facing switch ports.

DISA Rule

SV-273684r1110987_rule

Vulnerability Number

V-273684

Group Title

SRG-NET-000512-L2S-000001

Rule Version

RCKS-L2S-000160

Severity

CAT III

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Configure storm control on each host-facing switch ports.

1. Enter global configuration mode:
device#configure terminal

2. Configure storm control:
device (config-if-e2500-1/1/5)#broadcast limit 8787
device (config-if-e2500-1/1/5)#multicast limit 777
device (config-if-e2500-1/1/5)#unknown-unicast limit 888

Check Contents

Review the configuration for the desired storm control settings on host-facing ports.
!
interface ethernet 1/1/5
broadcast limit 8787
multicast limit 777
unknown-unicast limit 888
!

If host facing ports are not configured for storm control protection, this is a finding.

Vulnerability Number

V-273684

Documentable

False

Rule Version

RCKS-L2S-000160

Severity Override Guidance

Review the configuration for the desired storm control settings on host-facing ports.
!
interface ethernet 1/1/5
broadcast limit 8787
multicast limit 777
unknown-unicast limit 888
!

If host facing ports are not configured for storm control protection, this is a finding.

Check Content Reference

M

Target Key

5697