
Divided into four parts, LAN Switch Security provides you with steps you
can take to ensure the integrity of both voice and data traffic
traveling over Layer 2 devices. Part I covers vulnerabilities in Layer 2
protocols and how to configure switches to prevent attacks against those
vulnerabilities. Part II addresses denial-of-service (DoS) attacks on an
Ethernet switch and shows how those attacks can be mitigated. Part III
shows how a switch can actually augment the security of a network
through the utilization of wirespeed access control list (ACL)
processing and IEEE 802.1x for user authentication and authorization.
Part IV examines future developments from the LinkSec working group at
the IEEE. For all parts, most of the content is vendor independent and
is useful for all network architects deploying Ethernet switches.
After reading this book, you will have an in-depth understanding of LAN
security and be prepared to plug the security holes that exist in a
great number of campus networks.
- Use port security to protect against CAM attacks
- Prevent spanning-tree attacks
- Isolate VLANs with proper configuration techniques
- Protect against rogue DHCP servers
- Block ARP snooping
- Prevent IPv6 neighbor discovery and router solicitation exploitation
- Identify Power over Ethernet vulnerabilities
- Mitigate risks from HSRP and VRPP
- Stop information leaks with CDP, PaGP, VTP, CGMP and other Cisco
ancillary protocols
- Understand and prevent DoS attacks against switches
- Enforce simple wirespeed security policies with ACLs
- Implement user authentication on a port base with IEEE 802.1x
- Use new IEEE protocols to encrypt all Ethernet frames at wirespeed.
Download