| Checked | Name | Title |
|---|
| ☐ | SV-273672r1110975_rule | The RUCKUS ICX switch must be configured to disable nonessential capabilities. |
| ☐ | SV-273673r1110976_rule | The RUCKUS ICX switch must uniquely identify all network-connected endpoint devices before establishing any connection. |
| ☐ | SV-273674r1110977_rule | The RUCKUS ICX switch must disable the Multiple VLAN Registration Protocol (MVRP). |
| ☐ | SV-273675r1111323_rule | The RUCKUS ICX switch must manage excess bandwidth to limit the effects of packet flooding types of denial-of-service (DoS) attacks. |
| ☐ | SV-273676r1111002_rule | The RUCKUS ICX switch must authenticate all network-connected endpoint devices before establishing any connection. |
| ☐ | SV-273677r1111058_rule | The RUCKUS ICX switch must have Root Protect enabled on all switch ports connecting to access layer switches and hosts. |
| ☐ | SV-273678r1110981_rule | The RUCKUS ICX switch must have Bridge Protocol Data Unit (BPDU) Guard enabled on all user-facing or untrusted access switch ports. |
| ☐ | SV-273679r1110982_rule | The RUCKUS ICX switch must have Spanning Tree Protocol (STP) Loop Detect enabled on all nondesignated STP switch ports |
| ☐ | SV-273680r1110983_rule | The RUCKUS ICX switch must have Unknown Unicast Flood Blocking (UUFB) enabled. |
| ☐ | SV-273681r1111008_rule | The RUCKUS ICX switch must have DHCP snooping for all user VLANs to validate DHCP messages from untrusted sources. |
| ☐ | SV-273682r1111010_rule | The RUCKUS ICX switch must have IP Source Guard enabled on all user-facing or untrusted access switch ports. |
| ☐ | SV-273683r1110986_rule | The RUCKUS ICX switch must have Dynamic Address Resolution Protocol (ARP) Inspection (DAI) enabled on all user VLANs. |
| ☐ | SV-273684r1110987_rule | The RUCKUS ICX switch must have Storm Control configured on all host-facing switch ports. |
| ☐ | SV-273685r1110988_rule | The RUCKUS ICX switch must have IGMP or MLD Snooping configured on all VLANs. |
| ☐ | SV-273686r1110989_rule | The RUCKUS ICX switch must implement Rapid Spanning Tree Protocol (STP) where VLANs span multiple switches with redundant links. |
| ☐ | SV-273687r1110990_rule | The RUCKUS ICX switch must enable Unidirectional Link Detection (UDLD) to protect against one-way connections. |
| ☐ | SV-273688r1111017_rule | The RUCKUS ICX switch must have all disabled switch ports assigned to an unused VLAN. |
| ☐ | SV-273689r1111059_rule | The RUCKUS ICX switch must not have the default VLAN assigned to any host-facing switch ports. |
| ☐ | SV-273690r1110993_rule | The RUCKUS ICX switch must have the default VLAN pruned from all trunk ports that do not require it. |
| ☐ | SV-273691r1111060_rule | The RUCKUS ICX switch must not use the default VLAN for management traffic. |
| ☐ | SV-273692r1110995_rule | The RUCKUS ICX switch must have all user-facing or untrusted ports configured as access switch ports. |
| ☐ | SV-273693r1110996_rule | The RUCKUS ICX layer 2 switch must have the native VLAN assigned to an ID other than the default VLAN for all 802.1q trunk links. |
| ☐ | SV-273694r1110997_rule | The RUCKUS ICX switch must not have any switch ports assigned to the native VLAN. |
| ☐ | SV-273696r1110998_rule | The RUCKUS ICX switch must implement physically or logically separate subnetworks to isolate organization-defined critical system components and functions. |
STIGQter: STIG Summary: