The TFTP server used to store network element configurations and images must be only connected to the management network.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-5644	NET1071	SV-5644r2_rule	ECSC-1	Medium

Description
TFTP that contains network element configurations and images must only be connected to the management network to enforce restricted and limited access.

STIG	Date
Network Devices Security Technical Implementation Guide	2018-11-27

Details

Check Text ( C-3657r2_chk )
Review the layer 2 and layer 3 network topology to determine what network the TFTP server is connected to. Verify that the server has been configured or assigned an IP address that belongs to the management network.

Fix Text (F-5555r2_fix)
Connect the TFTP server only to the management network.