Home
Security Hardening
DISA STIG Arista MLS DCS 7000 Series L2S V1R2

DISA STIG Arista MLS DCS 7000 Series L2S V1R2

AMLS-L2-000100 – The Arista Multilayer Switch must enforce approved authorizations for controlling the flow of information within the network based on organization-defined information flow control policies.
Details Information flow control regulates where information is allowed to travel within a network and between interconnected networks. The flow...
AMLS-L2-000110 – The Arista Multilayer Switch must enforce approved authorizations for controlling the flow of information between interconnected systems based on organization-defined information flow control policies.
Details Information flow control regulates where information is allowed to travel within a network and between interconnected networks. The flow...
AMLS-L2-000120 – The Arista Multilayer Switch must uniquely identify all network-connected endpoint devices before establishing any connection – aaa auth dot1x default group
Details Without identifying devices, unidentified or unknown devices may be introduced, thereby facilitating malicious activity. For distributed architectures (e.g., service-oriented...
AMLS-L2-000120 – The Arista Multilayer Switch must uniquely identify all network-connected endpoint devices before establishing any connection – dot1x system-auth-control
Details Without identifying devices, unidentified or unknown devices may be introduced, thereby facilitating malicious activity. For distributed architectures (e.g., service-oriented...
AMLS-L2-000130 – The Arista Multilayer Switch must authenticate all endpoint devices before establishing a network connection using bidirectional authentication that is cryptographically based – aaa authentication dot1x default group
Details Without authenticating devices, unidentified or unknown devices may be introduced, thereby facilitating malicious activity on the network. Bidirectional authentication...
AMLS-L2-000130 – The Arista Multilayer Switch must authenticate all endpoint devices before establishing a network connection using bidirectional authentication that is cryptographically based – dot1x system-auth-control
Details Without authenticating devices, unidentified or unknown devices may be introduced, thereby facilitating malicious activity on the network. Bidirectional authentication...
AMLS-L2-000140 – The Arista Multilayer Switch must re-authenticate all endpoint devices every 60 minutes or less – dot1x reauthentication
Details Without authenticating devices, unidentified or unknown devices may be introduced, thereby facilitating malicious activity on the network. Bidirectional authentication...
AMLS-L2-000140 – The Arista Multilayer Switch must re-authenticate all endpoint devices every 60 minutes or less – dot1x timeout reauth-period 3600
Details Without authenticating devices, unidentified or unknown devices may be introduced, thereby facilitating malicious activity on the network. Bidirectional authentication...
AMLS-L2-000150 – The Arista Multilayer Switch must re-authenticate 802.1X connected devices every hour – dot1x timeout reauth-period 3600
Details Without re-authentication, users may access resources or perform tasks for which they do not have authorization. In addition to...
AMLS-L2-000150 – The Arista Multilayer Switch must re-authenticate 802.1X connected devices every hour – logging level DOT1X informational
Details Without re-authentication, users may access resources or perform tasks for which they do not have authorization. In addition to...

DISA STIG Arista MLS DCS 7000 Series L2S V1R2

AMLS-L2-000100 – The Arista Multilayer Switch must enforce approved authorizations for controlling the flow of information within the network based on organization-defined information flow control policies.

AMLS-L2-000110 – The Arista Multilayer Switch must enforce approved authorizations for controlling the flow of information between interconnected systems based on organization-defined information flow control policies.

AMLS-L2-000120 – The Arista Multilayer Switch must uniquely identify all network-connected endpoint devices before establishing any connection – aaa auth dot1x default group

AMLS-L2-000120 – The Arista Multilayer Switch must uniquely identify all network-connected endpoint devices before establishing any connection – dot1x system-auth-control

AMLS-L2-000130 – The Arista Multilayer Switch must authenticate all endpoint devices before establishing a network connection using bidirectional authentication that is cryptographically based – aaa authentication dot1x default group

AMLS-L2-000130 – The Arista Multilayer Switch must authenticate all endpoint devices before establishing a network connection using bidirectional authentication that is cryptographically based – dot1x system-auth-control

AMLS-L2-000140 – The Arista Multilayer Switch must re-authenticate all endpoint devices every 60 minutes or less – dot1x reauthentication

AMLS-L2-000140 – The Arista Multilayer Switch must re-authenticate all endpoint devices every 60 minutes or less – dot1x timeout reauth-period 3600

AMLS-L2-000150 – The Arista Multilayer Switch must re-authenticate 802.1X connected devices every hour – dot1x timeout reauth-period 3600

AMLS-L2-000150 – The Arista Multilayer Switch must re-authenticate 802.1X connected devices every hour – logging level DOT1X informational