Securing the access layer requires moving beyond default configurations. Key best practices from Cisco's Security Guidelines include:
While most security focuses on Layers 3 through 7, the Data Link Layer (Layer 2) remains a critical yet often overlooked vulnerability surface. This paper outlines the primary attack vectors—including MAC flooding, DHCP spoofing, and VLAN hopping—and provides a framework for multi-layered defense strategies in switched Ethernet environments. 1. Common Layer 2 Vulnerabilities
In modern environments, particularly those involving , defense-in-depth is essential:
Attacking the switch's CAM table to force it into a "fail-open" mode where it broadcasts all traffic like a hub.
Poisoning ARP caches to redirect traffic to the attacker’s machine. 2. Prevention and Mitigation Strategies
Limit the number of MAC addresses allowed per port to prevent CAM table overflows. VLAN Hardening: Never use VLAN 1 for user traffic or management.
Securing the access layer requires moving beyond default configurations. Key best practices from Cisco's Security Guidelines include:
While most security focuses on Layers 3 through 7, the Data Link Layer (Layer 2) remains a critical yet often overlooked vulnerability surface. This paper outlines the primary attack vectors—including MAC flooding, DHCP spoofing, and VLAN hopping—and provides a framework for multi-layered defense strategies in switched Ethernet environments. 1. Common Layer 2 Vulnerabilities Understanding, Preventing, and Defending Agains...
In modern environments, particularly those involving , defense-in-depth is essential: Securing the access layer requires moving beyond default
Attacking the switch's CAM table to force it into a "fail-open" mode where it broadcasts all traffic like a hub. particularly those involving
Poisoning ARP caches to redirect traffic to the attacker’s machine. 2. Prevention and Mitigation Strategies
Limit the number of MAC addresses allowed per port to prevent CAM table overflows. VLAN Hardening: Never use VLAN 1 for user traffic or management.