The router must be configured so inactive router interfaces are disabled.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-55731	SRG-NET-000019-RTR-000007	SV-69985r1_rule		Medium

Description
An inactive interface is rarely monitored or controlled and may expose a network to an undetected attack on that interface. Unauthorized personnel with access to the communication facility could gain access to a router by connecting to a configured interface that is not in use.

STIG	Date
Router Security Requirements Guide	2014-11-18

Details

Check Text ( C-56297r1_chk )
Verify inactive interfaces on the router are disabled. If there are any inactive interfaces enabled on the router, this is a finding.

Fix Text (F-60601r1_fix)
Remove subinterfaces and disable any inactive ports on the router.