Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-17832 | NET1003 | SV-19090r2_rule | Medium |
Description |
---|
If the management systems reside within the same layer 2 switching domain as the managed network device, then separate VLANs will be deployed to provide separation at that level. In this case, the management network still has its own subnet while at the same time it is defined as a unique VLAN. |
STIG | Date |
---|---|
Layer 2 Switch Security Technical Implementation Guide | 2017-12-07 |
Check Text ( C-19249r2_chk ) |
---|
Review the switch configuration to determine if the management VLAN has been assigned an IP address from the management network address block. If the management VLAN interface has not been assigned an IP address from the management network address block, this is a finding. |
Fix Text (F-17749r1_fix) |
---|
Configure the management VLAN with an IP address from the management network address block. |