JUEX-L2-000220 - The Juniper EX switch must not use the default VLAN for management traffic.

Information

By default, all unassigned interfaces are placed into the default VLAN and if used for management, could unintentionally expose sensitive traffic or protected resources to unauthorized devices.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Configure the switch for management access to use a VLAN other than the default VLAN.

set interfaces <interface name> unit 0 family ethernet-switching interface-mode access
set interfaces <interface name> unit 0 family ethernet-switching vlan members <vlan name>

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Juniper_EX_Switches_Y24M07_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7, CAT|II, CCI|CCI-004891, Rule-ID|SV-253969r997519_rule, STIG-ID|JUEX-L2-000220, Vuln-ID|V-253969

Plugin: Juniper

Control ID: ecec79a110abb4fb6c4a75e2b4d7db13b1d6caadb58f6a3202ea62c2b35bc3f0