Skip to content

The Dell OS10 Router must be configured to have all inactive interfaces disabled.

An XCCDF Rule

Description

An inactive interface is rarely monitored or controlled and may expose a network to an undetected attack on that interface. Unauthorized personnel with access to the communication facility could gain access to a router by connecting to a configured interface that is not in use. If an interface is no longer used, the configuration must be deleted and the interface disabled. For subinterfaces, delete subinterfaces that are on inactive interfaces and delete subinterfaces that are themselves inactive. If the subinterface is no longer necessary for authorized communications, it must be deleted.

ID
SV-269859r1051962_rule
Version
OS10-RTR-000160
Severity
Low
References
Updated

Remediation Templates

A Manual Procedure

Disable all inactive interfaces on the router as shown in the example below.

OS10(config)# default interface ethernet 1/1/6
OS10(config)# interface ethernet 1/1/6
OS10(conf-if-eth1/1/6)# no switchport
OS10(conf-if-eth1/1/6)# shutdown