Exploration LAN Switching Chapter2B

7/28/2019 Exploration LAN Switching Chapter2B

1/15

2006 Cisco Systems, Inc. All rights reserved. Cisco Publ icITE 1 Chapter 6 47

How to configure Telnet and SSH on a switch

Configuring Basic Security on a Switch


2/15


Key switch security attacks: MAC address flooding

spoofing attacks

CDP attacks

Telnet attacks



3/15


Key switch security attacks:



4/15





5/15





6/15


How network security tools are used to improvenetwork security



7/15 2006 Cisco Systems, Inc. All rights reserved. Cisco Publ icITE 1 Chapter 6 53

Configuring port security Secure MAC address types:

Static:using commandswitchport port-security mac-address address

Dynamic

Sticky:

Learns dynamically, then stores in running-config

Lost when switch restarts, but reloaded if config file wassaved




Configuring port security




Cisco IOS commands used to disable unused ports

It is a security violation when any of theseoccurs:

The maximum number of secure MAC addresses have been addedto the address table, and a station whose MAC address is not in the

address table attempts to access the interface.

An address learned or configured on one secure interface is seen onanother secure interface in the same VLAN.



10/15




It is also recommended to disable all unused ports:

Shutdown command

Use interface range

No shutdown to reactivate




Summary

LAN Design

Switch forwarding methods

Symmetric/Asymmetric switching

CISCO IOS CLI


15/1561

Documents

Exploration LAN Switching Chapter2B