STIGQter: STIG Summary: RUCKUS ICX Layer 2 Switch Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX switch must not have any switch ports assigned to the native VLAN.

DISA Rule

SV-273694r1110997_rule

Vulnerability Number

V-273694

Group Title

SRG-NET-000512-L2S-000013

Rule Version

RCKS-L2S-000270

Severity

CAT III

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Remove any native VLAN (i.e., untagged) from switch ports (1/2/1):

device(config)# vlan 4000
device(config-vlan-4000)# no untag ethernet 1/2/1

Check Contents

Examine switch port configuration to determine whether a native VLAN (i.e., untagged) is assigned.

!
vlan 4000 name DEFAULT-VLAN by port
no untagged ethernet 1/2/1
spanning-tree
!
!
vlan 10 by port
tagged ethernet 1/2/1
untagged ethernet 1/1/1
!
!
vlan 20 by port
tagged ethernet 1/2/1
untagged ethernet 1/1/2
!

If any switch ports have a native VLAN (i.e., untagged) also assigned, this is a finding.

Vulnerability Number

V-273694

Documentable

False

Rule Version

RCKS-L2S-000270

Severity Override Guidance

Examine switch port configuration to determine whether a native VLAN (i.e., untagged) is assigned.

!
vlan 4000 name DEFAULT-VLAN by port
no untagged ethernet 1/2/1
spanning-tree
!
!
vlan 10 by port
tagged ethernet 1/2/1
untagged ethernet 1/1/1
!
!
vlan 20 by port
tagged ethernet 1/2/1
untagged ethernet 1/1/2
!

If any switch ports have a native VLAN (i.e., untagged) also assigned, this is a finding.

Check Content Reference

M

Target Key

5697