Skip to content

No profile (default benchmark)

Rules and Groups employed by this XCCDF Profile

  • SRG-NET-000512-L2S-000010

    <GroupDescription></GroupDescription>
    Group
  • The Juniper EX switch must not use the default VLAN for management traffic.

    &lt;VulnDiscussion&gt;By default, all unassigned interfaces are placed into the default VLAN and if used for management, could unintentionally expo...
    Rule Medium Severity
  • SRG-NET-000512-L2S-000011

    <GroupDescription></GroupDescription>
    Group
  • The Juniper EX switch must be configured to set all user-facing or untrusted ports as access interfaces.

    &lt;VulnDiscussion&gt;Configuring user-facing or untrusted interfaces as trunked may expose network traffic to an unauthorized, or unintended, conn...
    Rule Medium Severity
  • SRG-NET-000512-L2S-000012

    <GroupDescription></GroupDescription>
    Group
  • The Juniper EX switch must not have a native VLAN ID assigned, or have a unique native VLAN ID, for all 802.1q trunk links.

    &lt;VulnDiscussion&gt;By default, Juniper switches do not assign a native VLAN to any trunked interface. Allowing trunked interfaces to accept unta...
    Rule Medium Severity
  • SRG-NET-000512-L2S-000013

    <GroupDescription></GroupDescription>
    Group
  • The Juniper EX switch must not have any access interfaces assigned to a VLAN configured as native for any trunked interface.

    &lt;VulnDiscussion&gt;Trunked interfaces without an assigned native VLAN do not accept untagged data packets. Allowing trunked interfaces to accept...
    Rule Low Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules