STIGQter: STIG Summary: Layer 2 Switch Security Requirements Guide Version: 1 Release: 6 Benchmark Date: 24 Jan 2020:

The layer 2 switch must have all trunk links enabled statically.

DISA Rule

SV-76687r1_rule

Vulnerability Number

V-62197

Group Title

SRG-NET-000512

Rule Version

SRG-NET-000512-L2S-000005

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure the switch to enable trunk links statically.

Check Contents

Review the switch configuration to verify that trunk negotiation is disabled by statically configuring all trunk links. Configuring a command to manually disable negotiation may also be required for some switch platforms.

If trunk negotiation is enabled on any interface, this is a finding.

Vulnerability Number

V-62197

Documentable

False

Rule Version

SRG-NET-000512-L2S-000005

Severity Override Guidance

Review the switch configuration to verify that trunk negotiation is disabled by statically configuring all trunk links. Configuring a command to manually disable negotiation may also be required for some switch platforms.

If trunk negotiation is enabled on any interface, this is a finding.

Check Content Reference

M

Target Key

2917

Comments