cat4500培训资料Catalyst-Lan-Security.pptVIP

Cisco Campus LAN Security William XU Nov, 2002 Agenda Part I: Specific Attacks and Countermeasures MAC Attacks VLAN “Hopping” Attacks Spanning Tree Attacks DHCP Attacks ARP Attacks and PVLAN Mitigation Access Control in Campus Network Campus LAN 802.1x Deployment Part II: Campus Network Security Lab Guide MAC Attacks Normal CAM Behaviour 1/3 Normal CAM Behaviour 2/3 Normal CAM Behaviour 3/3 CAM Overflow 1/3 Theoretical attack until May 1999 macof tool since May 1999 (about 100 lines of perl) Based on CAM Table’s limited size CAM Overflow 2/3 CAM Overflow 3/3 MAC Flooding Attack Mitigatio