Skip to content

Juniper EX Series Switches Layer 2 Switch Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The Juniper EX switch must be configured to verify two-way connectivity on all interswitch trunked interfaces.

    <VulnDiscussion>In topologies where fiber optic interconnections are used, physical misconnections can occur that allow a link to appear to b...
    Rule Medium Severity
  • SRG-NET-000512-L2S-000007

    <GroupDescription></GroupDescription>
    Group
  • The Juniper EX switch must be configured to assign all disabled access interfaces to an unused VLAN.

    &lt;VulnDiscussion&gt;It is possible that a disabled access interface that is assigned to a user or management VLAN becomes enabled by accident or ...
    Rule Medium Severity
  • SRG-NET-000512-L2S-000008

    <GroupDescription></GroupDescription>
    Group
  • The Juniper EX switch must not be configured with VLANs used for L2 control traffic assigned to any host-facing access interface.

    &lt;VulnDiscussion&gt;In a switched Ethernet network, some protocols use L2 Protocol Data Units (PDU) to communicate in-band management or other co...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules