STIGhubSTIGhub
STIGhub— A free STIG search and compliance tool·STIGs updated 1 hour ago
Powered by Pylon·Privacy·Terms·Feedback·© 2026 Beacon Cloud Solutions, Inc.
← Back to Nokia Service Router OS 25.x Layer 2 Switch Security Technical Implementation Guide

V-283686

CAT III (Low)

The Nokia layer 2 switch must have Storm Control configured on all host-facing switch ports.

Rule ID

SV-283686r1204132_rule

STIG

Nokia Service Router OS 25.x Layer 2 Switch Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-000366

Discussion

A traffic storm occurs when packets flood a LAN, creating excessive traffic and degrading network performance. Traffic storm control prevents network disruption by suppressing ingress traffic when the number of packets reaches configured threshold levels. Traffic storm control monitors ingress traffic levels on a port and drops traffic when the number of packets reaches the configured threshold level during any one-second interval.

Check Content

Review the router configuration to verify traffic is rate limited on host-facing interfaces.

Use the command below for each host-facing port and verify "Ingress Rate" is set to the required value: 

- show port 1/1/c3/1 | match "Ingress Rate"
Egress Rate        : Default                    Ingress Rate     : 500 
 
If storm control is not enabled on all host-facing switch ports, this is a finding.

Fix Text

Configure storm control on each host-facing switch port.

- configure port <port id> ethernet ingress-rate <value in mbps>