CISC-L2-000180 - The Cisco switch must implement Rapid STP where VLANs span multiple switches with redundant links.

Information

Spanning Tree Protocol (STP) is implemented on bridges and switches to prevent layer 2 loops when a broadcast domain spans multiple bridges and switches and when redundant links are provisioned to provide high availability in case of link failures. Convergence time can be significantly reduced using Rapid STP (802.1w) instead of STP (802.1d), resulting in improved availability. Rapid STP should be deployed by implementing either Rapid Per-VLAN-Spanning-Tree (Rapid-PVST) or Multiple Spanning-Tree Protocol (MSTP), the latter scales much better when there are many VLANs.

Solution

Configure Rapid STP or MSTP to be implemented at the access and distribution layers where VLANs span multiple switches as shown in the examples below:

SW2(config)#spanning-tree mode rapid-pvst

or

SW1(config)#spanning-tree mode mst

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Cisco_IOS-XE_Switch_Y24M07_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-220664r539671_rule, STIG-ID|CISC-L2-000180, STIG-Legacy|SV-110303, STIG-Legacy|V-101199, Vuln-ID|V-220664

Plugin: Cisco

Control ID: 586a9ef5f682357e7310bc3214c8a94692911b233850131fe1254097d32aa784