Protecting Against Spoof Attacks参考.pptVIP

Minimizing Service Loss and Data Theft in a Campus Network Protecting Against Spoof Attacks DHCP Spoof Attacks Attacker activates DHCP server on VLAN. Attacker replies to valid client DHCP requests. Attacker assigns IP configuration information that establishes rogue device as client default gateway. Attacker establishes “man-in-the-middle” attack. DHCP Snooping Securing Against DHCP Snooping Attacks Verifying DHCP Snooping IP Source Guard Configuring IP Source Guard on a Switch ARP Spoofing Dynamic ARP Inspection Configuring DAI Protection from ARP Spoofing Configure to protect against rogue