Scribd
Upload
6 views3 pages

CCNA Switching Security Overview

The document outlines key concepts in switching security configuration, including access and trunk ports, MAC address learning, and VLANs. It discusses various security features such as port security, BPDU guard, DHCP snooping, and dynamic ARP inspection, each aimed at protecting against specific network threats. Additionally, it covers inter-VLAN routing methods and the Spanning Tree Protocol to prevent loops in Layer 2 networks.

Uploaded by

bittukumar06082001
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
6 views3 pages

CCNA Switching Security Overview

The document outlines key concepts in switching security configuration, including access and trunk ports, MAC address learning, and VLANs. It discusses various security features such as port security, BPDU guard, DHCP snooping, and dynamic ARP inspection, each aimed at protecting against specific network threats. Additionally, it covers inter-VLAN routing methods and the Spanning Tree Protocol to prevent loops in Layer 2 networks.

Uploaded by

bittukumar06082001
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

CCNA Module 2 - Chapter 11: Switching Security Configuration Summary

1. Access vs Trunk Ports:

- Access Port: Connects to end devices, carries traffic for one VLAN.

- Trunk Port: Connects switches or routers, carries multiple VLANs using 802.1Q tagging.

2. MAC Address Learning:

- Switch learns source MAC address on incoming port and adds it to MAC address table.

- Uses destination MAC to forward or flood the frame.

3. VLAN:

- Logically divides LAN into smaller broadcast domains.

- Improves security and network efficiency.

4. switchport mode trunk:

- Configures a port to carry multiple VLANs by enabling trunking (not routing).

5. Inter-VLAN Routing Methods:

- Router-on-a-Stick: Subinterfaces on router.

- Layer 3 Switch: Uses Switch Virtual Interfaces (SVIs).

6. Spanning Tree Protocol (STP):

- Prevents Layer 2 loops by blocking redundant paths.

- Elects Root Bridge and assigns port roles (Root, Designated, Blocking).

7. EtherChannel:

- Combines multiple physical links into a single logical link.


- Uses LACP (IEEE) or PAgP (Cisco) for negotiation.

8. Wireless Bands:

- 2.4 GHz: Longer range, more interference, slower speed.

- 5 GHz: Faster, less interference, shorter range.

9. Port Security:

- Limits MAC addresses on a port.

- Modes: Protect, Restrict, Shutdown.

10. BPDU Guard:

- Disables PortFast-enabled ports if BPDUs are received.

- Prevents rogue switches from becoming Root Bridge.

11. DHCP Snooping:

- Marks ports as trusted/untrusted.

- Blocks DHCP offers from untrusted ports.

- Builds DHCP binding table.

12. Dynamic ARP Inspection (DAI):

- Uses DHCP binding table to verify ARP packets.

- Drops ARP packets with spoofed MAC/IP info.

Security Summary Table:

| Feature | Purpose | Protects Against |

|----------------|----------------------------------|---------------------------|

| Port Security | Limit MACs per port | MAC spoofing |


| BPDU Guard | Disable on unexpected BPDU | Rogue switches |

| DHCP Snooping | Control DHCP traffic by port | Rogue DHCP servers |

| DAI | Validate ARP against DHCP table | ARP spoofing |

You might also like