VLAN Management

SedangLevel 1Otomatisarista-eos

Deskripsi

VLAN 1 is a special VLAN that tags and handles most of the control plane traffic. VLAN 1 is enabled on all trunks and ports by default. Ensure VLAN1 is pruned from all trunk and access ports that do not require it. Instability in one part of the network could affect VLAN 1, thereby influencing control-plane stability and therefore STP stability for all other VLANs. Checks that VLAN 1 is suspended; trunk allowed lists still need manual review. Audited against the output of 'show running-config' (not 'show running-config all').

Cara pemeriksaan

Metode audit: Pola konfigurasi

Pola: (?m)^vlan 1\r?$[^\n]*\n(?:[ \t][^\n]*\n)*?[ \t]+state suspend\b

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

! vlan 1 state suspend interface Ethernet[X] switchport trunk allowed vlan except 1

Properti

Sistem operasi: Apa saja
Tag: arista-eosnetworkmanagement-plane
Referensi: CIS Arista EOS Benchmark v1.0.0 - 1.1.8 VLAN Management

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target arista-eos