STIGQter: STIG Summary: Nokia Service Router OS 25.x Layer 2 Switch Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

The Nokia layer 2 switch must have Unknown Unicast Flood Blocking (UUFB) enabled.

DISA Rule

SV-283682r1204074_rule

Vulnerability Number

V-283682

Group Title

SRG-NET-000362-L2S-000024

Rule Version

NOKI-L2-000100

Severity

CAT II

CCI(s)

• CCI-002385 - Protect against or limit the effects of organization-defined types of denial of service events.

Weight

10

Fix Recommendation

Configure the Nokia router VPLS service to have Unknown discard enabled:

- configure service vpls <service id> discard-unknown

Check Contents

Review the router virtual private local area network service (VPLS) configuration and verify discard-unknown is enabled for VPLS service.

The discard-unknown feature discards packets with unknown destination MAC addresses.

Use the command below and verify "Discard Unknown" is enabled:

- show service id 10 all | match "Discard Unknown"
Mac Learning : Enabled Discard Unknown : Enabled

If "Discard Unknown" is disabled, this is a finding.

Vulnerability Number

V-283682

Documentable

False

Rule Version

NOKI-L2-000100

Severity Override Guidance

Review the router virtual private local area network service (VPLS) configuration and verify discard-unknown is enabled for VPLS service.

The discard-unknown feature discards packets with unknown destination MAC addresses.

Use the command below and verify "Discard Unknown" is enabled:

- show service id 10 all | match "Discard Unknown"
Mac Learning : Enabled Discard Unknown : Enabled

If "Discard Unknown" is disabled, this is a finding.

Check Content Reference

M

Target Key

5743