LAN Security

LAN Security

1. Endpoint Security

   • Network Attacks
     • Distributed Denial of Service (DDoS)
     • Data Breach
     • Malware
   • Network Security Devices
     • VPN-Enabled Router
     • NGFW
     • NAC
   • Endpoint Protection
   • Cisco Email Security Appliance
   • Cisco Web Security Appliance

2. Access Control

   • Authentication with a Local Password
   • AAA Components
   • Authentication
   • Authorization
   • Accouting
   • 802.1X
     • Client (Supplicant)
     • Switch (Authenticator)
     • Authentication server

3. Layer 2 Secutity Threats

   • Switch Attacks Categories
     • MAC Table
     • VLAN
     • DHCP
     • ARP
     • Address Spoofing
     • STP
   • Switch Attack Mitigation Techniques
     • Port Security
     • DHCP Snooping
     • Dynamic ARP Inspection (DAI)
     • IP Source Guard (IPSG)

4. MAC Address Table Attack

   • Table Flooding
     • Bombarding the switch with fake source MAC addresses
   • Mitigation
     • Implement por security

5. LAN Attacks

   • VLAN Double-Tagging
   • DHCP Messages
   • DHCP Attacks
   • ARP
   • Address Spoofing
   • STP
   • VLAN Hopping
   • CDP Reconnaissance