HP FlexFabric Switch must authenticate all network-connected endpoint devices before establishing any connection.
An XCCDF Rule
Description
Controlling LAN access via 802.1x authentication or MAC authentication can assist in preventing a malicious user from connecting an unauthorized PC to a switch port to inject or receive data from the network without detection.
- ID
- SV-80541r1_rule
- Version
- HFFS-L2-000002
- Severity
- High
- References
- Updated
Remediation Templates
A Manual Procedure
Configure 802.1 x authentications on all host-facing access switch ports. To authenticate those devices that do not support 802.1x, MAC Authentication Bypass must be configured.
[HP] dot1x
[HP] dot1x authentication-method eap
[HP] domain radius jitc
[HP] radius scheme jitc