Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-18565 | NET-NAC-032 | SV-20109r1_rule | Low |
Description |
---|
The Port Security feature remembers the Ethernet MAC address connected to the switch port and allows only that MAC address to communicate on that port. If any other MAC address tries to communicate through the port, port security will disable the port. |
STIG | Date |
---|---|
Layer 2 Switch Security Technical Implementation Guide - Cisco | 2017-12-07 |
Check Text ( C-21652r1_chk ) |
---|
A shutdown action puts the interface into the error-disabled state immediately and sends an SNMP trap notification if it receives a frame with a different layer 2 source address that what has been configured or learned for port security. The following Catalyst IOS interface command will shutdown the interface when such an event occurs: switchport port-security violation shutdown |
Fix Text (F-19192r1_fix) |
---|
Configure the port to shutdown when insecure hosts are connected to the wall jack. |