NET1003 - Mgmt VLAN does not have correct IP address

Information

The management VLAN is not configured with an IP address from the management network address block.

If the management systems reside within the same layer 2 switching domain as the managed network elements, then separate VLANs will be deployed to provide separation at that level. In this case, the management network still has its own subnet while at the same time it is defined as a unique VLAN.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Review the switch configuration and verify that the management VLAN has been assigned an IP address from the management network address block. Following is an example for a Cisco Catalyst switch:

interface VLAN 10
description Management VLAN
ip address 10.1.1.10 255.255.255.0

NOTE: The IP address of the switch can be accessed only by nodes connected to ports that belong to the management VLAN.

Solution

Configure the management VLAN with an IP address from the management network address block.

See Also

https://iasecontent.disa.mil/stigs/zip/U_Network_L2_Switch_V8R26_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7, CAT|II, Rule-ID|SV-19702r1_rule, STIG-ID|NET1003, Vuln-ID|V-17832

Plugin: Cisco

Control ID: e8ec67104a8d947fe69a4c43bfe6a7b90628d565875ea87c51ba29f449f4e3bc