VLAN Management

MediaNivel 1Automatizadaarista-eos

Descripción

VLAN 1 is a special VLAN that tags and handles most of the control plane traffic. VLAN 1 is enabled on all trunks and ports by default. Ensure VLAN1 is pruned from all trunk and access ports that do not require it. Instability in one part of the network could affect VLAN 1, thereby influencing control-plane stability and therefore STP stability for all other VLANs. Checks that VLAN 1 is suspended; trunk allowed lists still need manual review. Audited against the output of 'show running-config' (not 'show running-config all').

Cómo se verifica

Método de auditoría: Patrón de configuración

Patrón: (?m)^vlan 1\r?$[^\n]*\n(?:[ \t][^\n]*\n)*?[ \t]+state suspend\b

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

! vlan 1 state suspend interface Ethernet[X] switchport trunk allowed vlan except 1

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: arista-eosnetworkmanagement-plane
Referencia: CIS Arista EOS Benchmark v1.0.0 - 1.1.8 VLAN Management

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target arista-eos