STIGUI
V-259943CAT II — Medium severitySV-259943r1117236_rule

The Enterprise Voice, Video, and Messaging Endpoint PC port must be configured to maintain VLAN separation from the voice video VLAN, or be disabled.

Rule version SRG-NET-000018-VVEP-00101 · STIG v1 · 2025-10-01

Discussion

Virtualized networking is used to separate voice video traffic from other types of traffic, such as data, management, and other special types. VLANs provide segmentation at layer 2. Virtual Routing and Forwarding (VRF) provides segmentation at layer 3 and works with Multiprotocol Label Switching (MPLS) for enterprise and WAN environments. When VRF is used without MPLS, it is referred to as VRF lite. For Voice Video systems, subnets, VLANs, and VRFs are used to separate media and signaling streams from all other traffic.

Check

Verify the Enterprise Voice, Video, and Messaging Endpoint PC port is configured to maintain VLAN separation from the voice video VLAN or is disabled.

If the Enterprise Voice, Video, and Messaging Endpoint PC port is disabled, this is not a finding. If the Enterprise Voice, Video, and Messaging Endpoint PC port does not maintain VLAN separation from the voice video VLAN, this is a finding.

Fix

Configure the Enterprise Voice, Video, and Messaging Endpoint PC port to maintain VLAN separation from the voice video VLAN or be disabled.

Identifiers

Group ID
V-259943
Group title
SRG-NET-000018
Rule ID
SV-259943r1117236_rule
Check ID
C-63674r948796_chk
Fix ID
F-63581r948797_fix