Detections
Analytics

1.50 CISC-RT-000700

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

The Cisco PE switch providing Virtual Private LAN Services (VPLS) must be configured to have traffic storm control thresholds on CE-facing interfaces.

GROUP ID: V-221123
RULE ID: SV-221123r999732

A traffic storm occurs when packets flood a VPLS bridge, creating excessive traffic and degrading network performance. Traffic storm control prevents VPLS bridge disruption by suppressing traffic when the number of packets reaches configured threshold levels. Traffic storm control monitors incoming traffic levels on a port and drops traffic when the number of packets reaches the configured threshold level during any one-second interval.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Configure storm control for each CE-facing interface as shown in the example below:

SW1(config)# int e2/4
SW1(config-if)# storm-control broadcast level 40
SW1(config-if)# end

See Also

https://workbench.cisecurity.org/benchmarks/22581

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-5(2), CAT|II, CCI|CCI-001095, CSCv7|13.3, Rule-ID|SV-221123r999732_rule, STIG-ID|CISC-RT-000700, Vuln-ID|V-221123

Plugin: Cisco

Control ID: fed5be92c0e7cf602ae7d023539a80347f29b7285f7a29bf43bff74bf05d04c4