LAN Switch Security: What Hackers Know About Your Switches - download pdf or read online

Contrary to well known trust, Ethernet switches will not be inherently safe. protection vulnerabilities in Ethernet switches are a number of: from the swap implementation, to manage aircraft protocols (Spanning Tree Protocol [STP], Cisco® Discovery Protocol [CDP], etc) and knowledge aircraft protocols, comparable to handle Routing Protocol (ARP) or Dynamic Host Configuration Protocol (DHCP). LAN swap defense explains the entire vulnerabilities in a community infrastructure with regards to Ethernet switches. additional, this e-book exhibits you the way to configure a change to avoid or to mitigate assaults according to these vulnerabilities. This ebook additionally contains a part on how one can use an Ethernet change to extend the protection of a community and stop destiny attacks.

Divided into 4 components, LAN change safeguard will give you steps you could take to make sure the integrity of either voice and information site visitors touring over Layer 2 units. half I covers vulnerabilities in Layer 2 protocols and the way to configure switches to avoid assaults opposed to these vulnerabilities. half II addresses denial-of-service (DoS) assaults on an Ethernet change and indicates how these assaults could be mitigated. half III exhibits how a swap can really increase the protection of a community in the course of the usage of wirespeed entry keep watch over record (ACL) processing and IEEE 802.1x for consumer authentication and authorization. half IV examines destiny advancements from the LinkSec operating team on the IEEE. For all components, many of the content material is seller autonomous and turns out to be useful for all community architects deploying Ethernet switches.

After examining this e-book, you have got an in-depth figuring out of LAN defense and be ready to plug the safety holes that exist in loads of campus networks.

• Use port protection to guard opposed to CAM attacks
• Prevent spanning-tree attacks
• Isolate VLANs with right configuration techniques
• Protect opposed to rogue DHCP servers
• Block ARP snooping
• Prevent IPv6 neighbor discovery and router solicitation exploitation
• Identify energy over Ethernet vulnerabilities
• Mitigate dangers from HSRP and VRPP
• Stop info leaks with CDP, PaGP, VTP, CGMP and different Cisco ancillary protocols
• Understand and stop DoS assaults opposed to switches
• Enforce basic wirespeed safety regulations with ACLs
• Implement person authentication on a port base with IEEE 802.1x
• Use new IEEE protocols to encrypt all Ethernet frames at wirespeed.

This defense publication is a part of the Cisco Press® Networking expertise sequence. protection titles from Cisco Press aid networking execs safe severe information and assets, hinder and mitigate community assaults, and construct end-to-end self-defending networks.