8-7-Module Summary
合集下载
相关主题
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
ຫໍສະໝຸດ Baidu
Module Summary
• Key switch security issues should be identified on a switched network and proper measures taken to mitigate known attacks. • VLAN trunk links should be secured to defend against VLAN hopping attacks. • DHCP snooping, port security, and dynamic ARP inspection are used to protect the network against spoofing attacks. • When placed into service, switches should be configured according to best practices to secure the switch device and its protocols from attacks that can be launched through a switch. • UDLD and loop guard protect the network from anomalous STP conditions that result from unidirectional links. • Implement AAA services to support port authentication using 802.1x.