NET-NAC-032 - Switchport does not shutdown on a violation

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

The IAO will ensure that all switchports configured using MAC port security will shutdown upon receiving a frame with a different layer 2 source address than what has been configured or learned for port security.

The Port Security feature remembers the Ethernet MAC address connected to the switch port and allows only that MAC address to communicate on that port. If any other MAC address tries to communicate through the port, port security will disable the port.

Solution

Configure the port to shutdown when insecure hosts are connected to the wall jack.

See Also

https://iasecontent.disa.mil/stigs/zip/U_Network_L2_Switch_V8R27_STIG.zip

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-4(7), CAT|III, Rule-ID|SV-20109r1_rule, STIG-ID|NET-NAC-032, Vuln-ID|V-18565

Plugin: Cisco

Control ID: 0c2a5d1b0a5df0989a31bade1a1a13750b58660b2477b287020537fade577b92