VLAN Management

SrednjaNivo 1Automatskaarista-eos

Opis

VLAN 1 is a special VLAN that tags and handles most of the control plane traffic. VLAN 1 is enabled on all trunks and ports by default. Ensure VLAN1 is pruned from all trunk and access ports that do not require it. Instability in one part of the network could affect VLAN 1, thereby influencing control-plane stability and therefore STP stability for all other VLANs. Checks that VLAN 1 is suspended; trunk allowed lists still need manual review. Audited against the output of 'show running-config' (not 'show running-config all').

Kako se proverava

Metod provere: Obrazac konfiguracije

Obrazac: (?m)^vlan 1\r?$[^\n]*\n(?:[ \t][^\n]*\n)*?[ \t]+state suspend\b

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

! vlan 1 state suspend interface Ethernet[X] switchport trunk allowed vlan except 1

Svojstva

Operativni sistemi: Bilo koji
Oznake: arista-eosnetworkmanagement-plane
Referenca: CIS Arista EOS Benchmark v1.0.0 - 1.1.8 VLAN Management

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target arista-eos