STIGQter: STIG Summary: Nokia Service Router OS 25.x Layer 2 Switch Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

The Nokia layer 2 switch must have Storm Control configured on all host-facing switch ports.

DISA Rule

SV-283686r1204132_rule

Vulnerability Number

V-283686

Group Title

SRG-NET-000512-L2S-000001

Rule Version

NOKI-L2-000140

Severity

CAT III

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Configure storm control on each host-facing switch port.

- configure port <port id> ethernet ingress-rate <value in mbps>

Check Contents

Review the router configuration to verify traffic is rate limited on host-facing interfaces.

Use the command below for each host-facing port and verify "Ingress Rate" is set to the required value:

- show port 1/1/c3/1 | match "Ingress Rate"
Egress Rate : Default Ingress Rate : 500

If storm control is not enabled on all host-facing switch ports, this is a finding.

Vulnerability Number

V-283686

Documentable

False

Rule Version

NOKI-L2-000140

Severity Override Guidance

Review the router configuration to verify traffic is rate limited on host-facing interfaces.

Use the command below for each host-facing port and verify "Ingress Rate" is set to the required value:

- show port 1/1/c3/1 | match "Ingress Rate"
Egress Rate : Default Ingress Rate : 500

If storm control is not enabled on all host-facing switch ports, this is a finding.

Check Content Reference

M

Target Key

5743