Virtual LAN (VLAN) - A logical grouping of computers based on switch port., MAC filtering/port security - A switch feature that restricts connection to a given port based on the MAC address., Port authentication - A switch feature that follows the 802.1x protocol to allow only authenticated devices to connect., Content Addressable Memory (CAM) table - A table maintained by a switch that contains MAC addresses and their corresponding port locations., Dynamic Host Configuration Protocol (DHCP) snooping - A security feature on some switches that filters out untrusted DHCP messages, Dynamic ARP inspection (DAI) - A security feature on some switches that verifies that each ARP request has a valid IP-to-MAC binding., MAC flooding - An attack that overloads a switch's MAC forwarding table to make the switch function like a hub., ARP spoofing - An attack in which the attacker's MAC address is associated with the IP address of a target's device., VLAN hopping - An attack in which the source MAC address is changed on frames sent by the attacker., Double tagging - An attack in which the attacking host adds two VLAN tags instead of one to the header of the frames that it transmits., MAC spoofing - An attack in which the source MAC address is changed in the header of a frame., Dynamic Trunking Protocol (DTP) - An unsecure protocol that could allow unauthorized devices to modify a switch's configuration.,

Network Ch. 7.4 Switch Security

列印
嵌入

排行榜

視覺風格

選項

切換範本

恢復自動保存: ?