STIGQter STIGQter: STIG Summary: HP FlexFabric Switch L2S Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 25 Jan 2019: The HP FlexFabric Switch must not have any access switch ports assigned to the native VLAN.

DISA Rule

SV-80587r1_rule

Vulnerability Number

V-66097

Group Title

SRG-NET-000512-L2S-000013

Rule Version

HFFS-L2-000030

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Remove the native vlan of the trunk ports.

[HP-GigabitEthernet1/0/1] undo port trunk permit vlan 1

Check Contents

Verify all access switch ports are not part of the native VLAN (VLAN 1).

If any access switch port is assigned to the native VLAN (VLAN 1), this is a finding.

<HP>display interface GigabitEthernet brief

Brief information on interface(s) under bridge mode:
Link: ADM - administratively down; Stby - standby
Speed or Duplex: (a)/A - auto; H - half; F - full
Type: A - access; T - trunk; H - hybrid
Interface Link Speed Duplex Type PVID Description
GE1/0/1 UP 1G(a) F(a) A 1
GE1/0/2 UP 1G(a) F(a) A 100
GE1/0/3 UP 10M(a) F(a) A 100
XGE1/0/1 UP 10G(a) F(a) A 200
XGE1/0/2 UP 10G(a) F(a) A 200

If any access switch port are configured for the native vlan. This is a finding.

Vulnerability Number

V-66097

Documentable

False

Rule Version

HFFS-L2-000030

Severity Override Guidance

Verify all access switch ports are not part of the native VLAN (VLAN 1).

If any access switch port is assigned to the native VLAN (VLAN 1), this is a finding.

<HP>display interface GigabitEthernet brief

Brief information on interface(s) under bridge mode:
Link: ADM - administratively down; Stby - standby
Speed or Duplex: (a)/A - auto; H - half; F - full
Type: A - access; T - trunk; H - hybrid
Interface Link Speed Duplex Type PVID Description
GE1/0/1 UP 1G(a) F(a) A 1
GE1/0/2 UP 1G(a) F(a) A 100
GE1/0/3 UP 10M(a) F(a) A 100
XGE1/0/1 UP 10G(a) F(a) A 200
XGE1/0/2 UP 10G(a) F(a) A 200

If any access switch port are configured for the native vlan. This is a finding.

Check Content Reference

M

Target Key

2977

Comments