Detections
Analytics

1.1.3 Control Plane Policy Map

Information

The default configuration comes with a pre-configured policy map to ensure adequate rate limiting for most traffic types punted to the CPU.

Control plane policing can be used to increase the security of Arista switches by protecting the control plane from unnecessary or malicious traffic. It is recommended to implement control plane protection by classifying traffic types based on importance levels and configure filters to restrict and rate limit the traffic punted to the processor according to each class.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

If no policy is configured, enable the default policy

system control-plane
 service-policy input copp-system-policy

See Also

https://workbench.cisecurity.org/benchmarks/25683

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-5

Plugin: Arista

Control ID: 0243de2f406601b05f05951601d14e0b6091d32911e5f842c4877c26733884fb