Check: NET0998
Network Infrastructure Policy STIG:
NET0998
(in versions v10 r6 through v9 r2)
Title
A dedicated management network must be implemented. (Cat II impact)
Discussion
To deploy a management network for the purpose of controlling, monitoring, and restricting management traffic, a separate management subnet must be implemented. Define a large enough address block that will enable the management network to scale in proportion to the managed network.
Check Content
Review the network topology diagram to determine if a management network has been implemented. Validate the IP address space documented for this network by verifying the IP addresses referenced for management access (SSH, NTP, AAA, SNMP manager, Syslog server, etc.) to the managed network elements. If a management network has not been implemented, this is a finding.
Fix Text
Define a large enough address block that will enable the management network to scale in proportion to the managed network.
Additional Identifiers
Rule ID: SV-251372r806071_rule
Vulnerability ID: V-251372
Group Title: NET0998
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000366 |
The organization implements the security configuration settings. |
Controls
Number | Title |
---|---|
CM-6 |
Configuration Settings |