The management VLAN must be configured with an IP address from the management network address block.

From Layer 2 Switch Security Technical Implementation Guide

Part of Mgmt VLAN does not have correct IP address

SV-19090r2_rule The management VLAN must be configured with an IP address from the management network address block.

Vulnerability discussion

If the management systems reside within the same layer 2 switching domain as the managed network device, then separate VLANs will be deployed to provide separation at that level. In this case, the management network still has its own subnet while at the same time it is defined as a unique VLAN.

Check content

Review the switch configuration to determine if the management VLAN has been assigned an IP address from the management network address block. If the management VLAN interface has not been assigned an IP address from the management network address block, this is a finding.

Fix text

Configure the management VLAN with an IP address from the management network address block.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.