HP FlexFabric Switch must re-authenticate all endpoint devices every 60 minutes or less.

From HP FlexFabric Switch L2S Security Technical Implementation Guide

Part of SRG-NET-000151-L2S-000018

Associated with: CCI-001967

SV-80545r1_rule HP FlexFabric Switch must re-authenticate all endpoint devices every 60 minutes or less.

Vulnerability discussion

Eliminating unauthorized access to the network from inside the enclave is vital to keeping a network secure. Internal access to the private network is enabled by simply connecting a workstation or laptop to a wall plate or access point located in the work area.

Check content

Review the configuration for all host-facing access switch ports and verify that re-authentication is specified to occur every 60 minutes or less. If 802.1x re-authentication does not occur every 60 minutes or less, this is a finding. display dot1x interface Ten-GigabitEthernet 1/0/7 802.1X protocol is enabled globally EAP authentication is enabled Configuration: Transmit Period 30 s, Handshake Period 15 s Quiet Period 60 s, Quiet Timer is disabled Supp Timeout 30 s, Server Timeout 100 s Reauth Period 3600 s Max attempts for sending an authentication request 2 Max number of 802.1X users is 2048 per slot Current number of online 802.1X users is 0 Ten-GigabitEthernet1/0/7 is link-down 802.1X protocol is enabled Handshake is enabled 802.1X unicast-trigger is disabled Periodic reauthentication is enabled

Fix text

Configure the 802.1x implementation on all host-facing access switch ports to enable re-authentication every 60 minutes or less. [HP] gigabitEthernet1/0/1 [HP-GigabitEthernet1/0/1] dot1x re-authenticate

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.

Powered by sagemincer