Navigate

Check: SRG-NET-000512-L2S-000001

Layer 2 Switch SRG: SRG-NET-000512-L2S-000001 (in versions v2 r1 through v1 r4)

Title

The layer 2 switch must have Storm Control configured on all host-facing switch ports. (Cat III impact)

Discussion

A traffic storm occurs when packets flood a LAN, creating excessive traffic and degrading network performance. Traffic storm control prevents network disruption by suppressing ingress traffic when the number of packets reaches a configured threshold levels. Traffic storm control monitors ingress traffic levels on a port and drops traffic when the number of packets reaches the configured threshold level during any one-second interval.

Check Content

Review the switch configuration to verify that storm control is enabled on host-facing interfaces. If storm control is not enabled on all host-facing switch ports, this is a finding.

Fix Text

Configure storm control on each host-facing switch ports.

Additional Identifiers

Rule ID: SV-206661r385561_rule

Vulnerability ID: V-206661

Group Title: SRG-NET-000512

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-000366	The organization implements the security configuration settings.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
CM-6	Configuration Settings