Detections
Analytics
OS10-L2S-000300 - The Dell OS10 Switch must implement physically or logically separate subnetworks to isolate organization-defined critical system components and functions.
Information
Separating critical system components and functions from other noncritical system components and functions through separate subnetworks may be necessary to reduce susceptibility to a catastrophic or debilitating breach or compromise that results in system failure. For example, physically separating the command-and-control function from the in-flight entertainment function through separate subnetworks in a commercial aircraft provides an increased level of assurance in the trustworthiness of critical system functions.Satisfies: SRG-NET-000715-L2S-000120, SRG-NET-000512-L2S-000012
Solution
Remove the assignment of the default VLAN from all access switch ports:OS10(config)# interface range eth1/1/4-1/1/58
OS10(conf-range-eth1/1/4-1/1/58)# switchport mode access
OS10(conf-range-eth1/1/4-1/1/58)# switchport access vlan 200
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Dell_OS10_Switch_Y24M12_STIG.zip
Item Details
Audit Name: DISA Dell OS10 Switch Layer 2 Switch STIG v1r1
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, CCI|CCI-004891, Rule-ID|SV-269972r1052302_rule, STIG-ID|OS10-L2S-000300, Vuln-ID|V-269972
Plugin: Dell_OS10
Control ID: 7f26a836a036bc70d7b14295eca111ad157cf7bb3461673dfca85cdf773b1630