V-18565
The IAO will ensure that all switchports configured using MAC port security will shutdown upon receiving a frame with a different layer 2 source address than what has been configured or learned for port security.
Finding ID
NET-NAC-032
Rule ID
SV-20109r1_rule
Severity
CCE
(None)
Group Title
Switchport does not shutdown on a violation
CCI
(None)
Target Key
(None)
Documentable
No
Discussion
The Port Security feature remembers the Ethernet MAC address connected to the switch port and allows only that MAC address to communicate on that port. If any other MAC address tries to communicate through the port, port security will disable the port.
Fix Text
Configure the port to shutdown when insecure hosts are connected to the wall jack.
Check Content
A shutdown action puts the interface into the error-disabled state immediately and sends an SNMP trap notification if it receives a frame with a different layer 2 source address that what has been configured or learned for port security. The following Catalyst IOS interface command will shutdown the interface when such an event occurs: switchport port-security violation shutdown
Responsibility
Information Assurance Officer