Scribd Logo
Upload

Welcome to Scribd!

  • LAN Security For CCNP SCOR Students by Eng. Abeer Hosni

    Uploaded by

    shimaa ashraf
    62 views3 pages
    The document discusses LAN security attacks and mitigations, including CDP attacks, MAC spoofing, VLAN hopping, DHCP spoofing, ARP spoofing, and IP spoofing. It recommends disabling CDP globally or per interface, using port security, disabling DTP negotiation, tagging the native VLAN, DHCP snooping, and DAI to mitigate these attacks. The document also lists LAN security features like protected ports, private VLANs, storm control, and port blocking. It discusses STP optimization techniques like PortFast, UplinkFast, and BackboneFast, as well as STP filters and loop prevention features.

    Original Description:

    network

    Original Title

    6bd9d731-929a-4e9e-89e4-63c36c891015

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    The document discusses LAN security attacks and mitigations, including CDP attacks, MAC spoofing, VLAN hopping, DHCP spoofing, ARP spoofing, and IP spoofing. It recommends disabling CDP globally or per interface, using port security, disabling DTP negotiation, tagging the native VLAN, DHCP snooping, and DAI to mitigate these attacks. The document also lists LAN security features like protected ports, private VLANs, storm control, and port blocking. It discusses STP optimization techniques like PortFast, UplinkFast, and BackboneFast, as well as STP filters and loop prevention features.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pdf or txt
    62 views3 pages

    LAN Security For CCNP SCOR Students by Eng. Abeer Hosni

    Uploaded by

    shimaa ashraf
    The document discusses LAN security attacks and mitigations, including CDP attacks, MAC spoofing, VLAN hopping, DHCP spoofing, ARP spoofing, and IP spoofing. It recommends disabling CDP globally or per interface, using port security, disabling DTP negotiation, tagging the native VLAN, DHCP snooping, and DAI to mitigate these attacks. The document also lists LAN security features like protected ports, private VLANs, storm control, and port blocking. It discusses STP optimization techniques like PortFast, UplinkFast, and BackboneFast, as well as STP filters and loop prevention features.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pdf or txt
    of 3

    2020

    LAN Security for


    CCNP SCOR Students
    By
    Eng. Abeer Hosni
    LAN Security Attacks

    1- CDP attack
    Mitigation: Disable CDP globally or per interface level.

    2- MAC spoofing and MAC (CAM) table flooding:


    - Mitigation: Port security.

    3- VLAN Hopping:
     Switch spoofing.
    - Mitigation: Disable DTP negotiation.
     Double tagging.
    - Mitigation: Tag the native VLAN.
    - Mitigation: Don’t use the native VLAN.

    4- DHCP Spoofing (DHCP Starvation / Rogue DHCP Server):


    - Mitigation: DHCP snooping.

    5- ARP Spoofing:
    - Mitigation: DAI.

    6- IP Spoofing:
    Mitigation:
    - Access Control List.
    - IP source guard.

    LAN Security Features


    - Protected Ports.
    - Private VLANs.
    - Storm Control.
    - Port Blocking.
    - Control Plane rate-limiting.
    STP Optimization
    STP Convergence Optimization:
    > PortFast
    > UplinkFast
    > BackboneFast

    STP Filters:
    > BPDU Filter
    > BPDU Guard
    > Root Guard

    STP Loop Prevention:


    > Loop Guard
    > UDLD

    Best Wishes
    Abeer :)

    You might also like