Command Help

TCookInvariant — Mon, 08 Feb 2021 20:46:24 GMT

I am currently having to configure a new C921-4P. I have read over the documentation and crawled the internet but cannot find anything that can help with a few requirements I need to fulfill. These requirements are from the L3 switch stig.

1. Disable switchport upon security violation

I cannot get the "switchport port-security violation shutdown" command to work. This is the only option I have been able to find to complete this.

2. Disable Gratuitous ARP

The "no ip arp gratuitos" command returns an error.

3. Disable L2TP in the private netowork of an enclave

4. Put Port 4 on VLAN 3

Am I not able to place WAN ports on VLANS?

5. Disable ID Support

Im not sure if this is the same thing as "no ip domain lookup"

Any help would be greatly appreciated.

Re: Command Help

balaji.bandi — Mon, 08 Feb 2021 22:17:21 GMT

C921-4P - is a router with an integrated switch, you may not see all the commands you see in the switch.

you can look at what IOS / IOS XE running on the command lookup syntax based in the code running on the router.

https://www.cisco.com/c/en/us/td/docs/routers/access/900/software/configuration/guide/900SCG.html

topic Re: Command Help in Network Security

Command Help

Re: Command Help