Home
Security Hardening
DISA STIG Cisco Infrastructure L3 Switch V8R29

DISA STIG Cisco Infrastructure L3 Switch V8R29

NET-NAC-009 – The switch must be configured to use 802.1x authentication on host facing access switch ports. ‘802.1x authentication’
Details The IEEE 802.1x standard is a client-server based access control and authentication protocol that restricts unauthorized clients from connecting...
NET-NAC-009 – The switch must be configured to use 802.1x authentication on host facing access switch ports. ‘aaa authentication’
Details The IEEE 802.1x standard is a client-server based access control and authentication protocol that restricts unauthorized clients from connecting...
NET-NAC-009 – The switch must be configured to use 802.1x authentication on host facing access switch ports. ‘aaa new-model’
Details The IEEE 802.1x standard is a client-server based access control and authentication protocol that restricts unauthorized clients from connecting...
NET-NAC-009 – The switch must be configured to use 802.1x authentication on host facing access switch ports. ‘radius-server host’
Details The IEEE 802.1x standard is a client-server based access control and authentication protocol that restricts unauthorized clients from connecting...
NET-NAC-009 – The switch must be configured to use 802.1x authentication on host facing access switch ports. ‘system-auth-control’
Details The IEEE 802.1x standard is a client-server based access control and authentication protocol that restricts unauthorized clients from connecting...
NET-NAC-031
Details The switch must only allow a maximum of one registered MAC address per access port. Limiting the number of...
NET-NAC-032 – Switchport does not shutdown on a violation
Details The IAO will ensure that all switchports configured using MAC port security will shutdown upon receiving a frame with...
NET-TUNL-034 – L2TPv3 sessions are not authenticated – authentication check
Details The administrator must ensure the that all L2TPv3 sessions are authenticated prior to transporting traffic. L2TPv3 sessions can be...
NET-TUNL-034 – L2TPv3 sessions are not authenticated – encapsulation check
Details The administrator must ensure the that all L2TPv3 sessions are authenticated prior to transporting traffic. L2TPv3 sessions can be...
NET-SRVFRM-003 – ACLs must restrict access to server VLANs
Details Server VLAN interfaces must be protected by restrictive ACLs using a deny-by-default security posture. Protecting data sitting in a...

Prev Next

DISA STIG Cisco Infrastructure L3 Switch V8R29

NET-NAC-009 – The switch must be configured to use 802.1x authentication on host facing access switch ports. ‘802.1x authentication’

NET-NAC-009 – The switch must be configured to use 802.1x authentication on host facing access switch ports. ‘aaa authentication’

NET-NAC-009 – The switch must be configured to use 802.1x authentication on host facing access switch ports. ‘aaa new-model’

NET-NAC-009 – The switch must be configured to use 802.1x authentication on host facing access switch ports. ‘radius-server host’

NET-NAC-009 – The switch must be configured to use 802.1x authentication on host facing access switch ports. ‘system-auth-control’

NET-NAC-031

NET-NAC-032 – Switchport does not shutdown on a violation

NET-TUNL-034 – L2TPv3 sessions are not authenticated – authentication check

NET-TUNL-034 – L2TPv3 sessions are not authenticated – encapsulation check

NET-SRVFRM-003 – ACLs must restrict access to server VLANs