NET1003 - Mgmt VLAN does not have correct IP address

Information

The management VLAN is not configured with an IP address from the management network address block.

If the management systems reside within the same layer 2 switching domain as the managed network elements, then separate VLANs will be deployed to provide separation at that level. In this case, the management network still has its own subnet while at the same time it is defined as a unique VLAN.

NOTE: This check is derived from the L3 switch guidance, if the scan target is a router the check can be ignored.
NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Configure the management VLAN with an IP address from the management network address block.

See Also

https://iasecontent.disa.mil/stigs/zip/U_Network_Perimeter_Router_L3_Switch_V8R32_STIG.zip

Item Details

References: CAT|II, Rule-ID|SV-19090r2_rule, STIG-ID|NET1003, Vuln-ID|V-17832

Plugin: Cisco

Control ID: 9734bc3c15661d846e5df6f43299e4b61d852697e56fade3e27e2c6ec267d13f