CCNA Security Study Guide, 2nd Edition

Chapter 6Preventing Layer 2 Attacks

CISCO CCNA SECURITY EXAM OBJECTIVES COVERED IN THIS CHAPTER:

•  4.5 Mitigation procedures
  • Implement DHCP snooping
  • Implement Dynamic ARP Inspection
  • Implement port security
  • Describe BPDU guard, root guard, loop guard
  • Verify mitigation procedures

 Now that you understand some of the layer 2 attacks that can be aimed at your switching infrastructure, you are ready to learn about the mitigations that are available to address each of these attacks. This chapter will discuss how to prevent STP attacks, ARP pollution, ...