Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
Cisco IOS Switch L2S Security Technical Implementation Guide
SRG-NET-000512-L2S-000002
The Cisco switch must have IGMP or MLD Snooping configured on all VLANs.
The Cisco switch must have IGMP or MLD Snooping configured on all VLANs.
An XCCDF Rule
Details
Profiles
Prose
The Cisco switch must have IGMP or MLD Snooping configured on all VLANs.
Low Severity
<VulnDiscussion>IGMP and MLD snooping provide a way to constrain multicast traffic at Layer 2. By monitoring the IGMP or MLD membership reports sent by hosts within a VLAN, the snooping application can set up Layer 2 multicast forwarding tables to deliver specific multicast traffic only to interfaces connected to hosts interested in receiving the traffic, thereby significantly reducing the volume of multicast traffic that would otherwise flood the VLAN.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>