10. LAN security concepts

10. LAN security concepts

1. Endpoint security

   • Endpoints typically use host-based security features
     • Antivirus
     • host-based firewall
     • HIPSs
   • Solution:
     • Implement NAC, host-based AMP software, ESA & WSA

2. Access control

   • authenticate
   • authohrize
   • account
   • AAA server keeps a log of what an authenticated user does on the device

3. L2 security threats

   • If L2 is compromised, then all layers above it are also affected
   • Solution:
     • Understand L2 operation
     • Port security
     • DHCP snooping
     • DAI
     • IPSG

4. MAC address table attack

   • Attack that bombards a MAC AT with fake source MAC addresses
     • Macof is used to generate random S&D MAC addresses
   • The switch now unicast all traffic out a port, the actor can capture these frames
   • Solution:
     • Port security

5. LAN attacks

   • VLAN hopping
     • Solution:
       • Disable trunking on all AP
       • Disable auto trunking on trunk links
       • Use VLAN for trunk links
   • DHCP attack
     • Solution:
       • DHCP snooping
   • ARP attack
     • Solution:
       • DAI
   • Address spoofing attack
     • Solution:
       • IPSG
   • STP attack
     • Solution:
       • BPDU guard on all ports