II - Mission Support Classified
Rules and Groups employed by this XCCDF Profile
-
The Juniper EX switch must not have a native VLAN ID assigned, or have a unique native VLAN ID, for all 802.1q trunk links.
By default, Juniper switches do not assign a native VLAN to any trunked interface. Allowing trunked interfaces to accept untagged data packets may unintentionally expose VLANs to unauthorized devic...Rule Medium Severity -
SRG-NET-000512-L2S-000013
Group -
The Juniper EX switch must not have any access interfaces assigned to a VLAN configured as native for any trunked interface.
Trunked interfaces without an assigned native VLAN do not accept untagged data packets. Allowing trunked interfaces to accept untagged data packets may unintentionally expose VLANs to unauthorized ...Rule Low Severity -
SRG-NET-000131-L2S-000014
Group -
The Juniper EX switch must be configured to disable non-essential capabilities.
A compromised switch introduces risk to the entire network infrastructure as well as data resources that are accessible via the network. The perimeter defense has no oversight or control of attacks...Rule High Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Capacity
Modules