The hardware Voice Video Endpoint must use a voice video VLAN, separate from all other VLANs.

From Voice Video Endpoint Security Requirements Guide

Part of SRG-NET-000520-VVEP-00011

Associated with: CCI-000366 CCI-002272

SV-81193r3_rule The hardware Voice Video Endpoint must use a voice video VLAN, separate from all other VLANs.

Vulnerability discussion

Virtualized networking is used to separate voice video traffic from other types of traffic, such as data, management, and other special types. VLANs provide segmentation at layer 2. Virtual Routing and Forwarding (VRF) provides segmentation at layer 3, and works with Multiprotocol Label Switching (MPLS) for enterprise and WAN environments. When VRF is used without MPLS, it is referred to as VRF lite. For Voice Video systems, subnets, VLANs, and VRFs are used to separate media and signaling streams from all other traffic.

Check content

If the Voice Video Endpoint is not a hardware endpoint, this check procedure is Not Applicable. Verify the hardware Voice Video Endpoint uses a voice video VLAN separate from all other VLANs. For networks with both VoIP and videoconferencing, best practice is to have a separate voice VLAN and video VLAN. If the hardware Voice Video Endpoint does not use a voice video VLAN separate from all other VLANs, this is a finding.

Fix text

Configure the hardware Voice Video Endpoint to use a voice video VLAN separate from all other VLANs.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.

Powered by sagemincer