← Back to Dell OS10 Switch Layer 2 Switch Security Technical Implementation Guide

V-269962

CAT III (Low)

The Dell OS10 Switch must have Storm Control configured on all host-facing switch ports.

Rule ID

SV-269962r1052327_rule

STIG

Dell OS10 Switch Layer 2 Switch Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-000366

Discussion

A traffic storm occurs when packets flood a LAN, creating excessive traffic and degrading network performance. Traffic storm control prevents network disruption by suppressing ingress traffic when the number of packets reaches a configured threshold level. Traffic storm control monitors ingress traffic levels on a port and drops traffic when the number of packets reaches the configured threshold level during any one-second interval.

Check Content

Review the Dell OS10 Switch configuration to verify that storm control is enabled on all host-facing switch ports.

For each host-facing switch port: 

interface ethernet1/1/1
  switchport access vlan 100
  storm-control broadcast 1000
  storm-control multicast rate 100 Mbps
  storm-control unknown-unicast rate 600 Kbps

Note that the rates may be entered in bits per second or packets per second units.

If the switch has not enabled storm control on all host-facing switch ports, this is a finding.

Fix Text

Configure the Dell OS10 Switch to enable storm control is on all host-facing switch ports as shown in the example below:

OS10(config)# interface ethernet 1/1/1
OS10(conf-if-eth1/1/1)# storm-control broadcast 1000
OS10(conf-if-eth1/1/1)# storm-control multicast rate 100 Mbps
OS10(conf-if-eth1/1/1)# storm-control unknown-unicast rate 600 Kbps