STIGQter: STIG Summary: RUCKUS ICX Layer 2 Switch Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX switch must implement Rapid Spanning Tree Protocol (STP) where VLANs span multiple switches with redundant links.

DISA Rule

SV-273686r1110989_rule

Vulnerability Number

V-273686

Group Title

SRG-NET-000512-L2S-000003

Rule Version

RCKS-L2S-000180

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Configure Rapid STP at the access and distribution layers where VLANs span multiple switches.

VLAN:
Router# configure terminal
Router (config)# vlan 10
Router(config-vlan-10)#spanning-tree 802-1w
(config-vlan-10)# spanning-tree 802-1w priority 256

Optional Per Port:
Router#configure terminal
Router(config) interface ethernet 1/1/1
Router(config-if-e2500-1/1/1) spanning-tree 802-1w admin-pt2pt-mac
<OR>
spanning-tree 802-1w admin-edge-port

Check Contents

Review configuration for VLANs that are not set for 802.1w (Rapid Spanning Tree).

vlan 10 name testing by port
tagged ethernet 1/1/17
untagged ethernet 1/1/18
spanning-tree 802-1w
!

If 802.1w is not configured on VLANs that span multiple switches with redundant links, this is a finding.

Vulnerability Number

V-273686

Documentable

False

Rule Version

RCKS-L2S-000180

Severity Override Guidance

Review configuration for VLANs that are not set for 802.1w (Rapid Spanning Tree).

vlan 10 name testing by port
tagged ethernet 1/1/17
untagged ethernet 1/1/18
spanning-tree 802-1w
!

If 802.1w is not configured on VLANs that span multiple switches with redundant links, this is a finding.

Check Content Reference

M

Target Key

5697