CCNA Security (640-554) Portable Command Guide

Chapter 8. Securing the Data Plane on Catalyst Switches

This chapter covers the following topics:

Common Threats to the Switching Infrastructure

• Layer 2 Attacks

• Layer 2 Security Guidelines

MAC Address Attacks

• Configuring Port Security

• Fine-Tuning Port Security

• Configuring Optional Port Security Settings

• Configuring Port Security Example

Spanning Tree Protocol Attacks

• STP Enhancement Features

• Configuring STP Enhancement Features

• Configuring STP Enhancements Example

LAN Storm Attacks

• Configuring Storm Control

• Configuring Storm Control Example

VLAN Hopping Attacks

• Mitigating VLAN Attacks

• Mitigating VLAN Attacks Example

Advanced Layer 2 Security Features

• ACLs and Private VLANs

• Cisco Integrated Security Features

• Secure ...