Details

The IP Filter policy is a set of rules applied to the IP management interfaces as a packet filtering firewall.

By setting the policy to reject protects local switch from distributions of databases from other switches.

Solution

To configure the switch to reject distribution of the IPfilter policy

switch:admin> fddcfg –localreject ‘IPFILTER’

Supportive Information

The following resource is also helpful.

• https://docs.broadcom.com/docs/12380061

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Brocade.

References

• 800-53|SC-7(11)

Source

• Tenable.com/audits