انجمن سیسکو به پارسی آشنایی با برخی حملات در لایه 2 آشنایی با برخی حملات در لایه 2 علیرضا محمدی علیرضا محمدی

Motivation Attack attack for data destroyed attack for Stealing computers data attack for data destroyed attack for down services

Switched Data Plane Attacks: STP Spoofing DHCP Attacks DHCP Attacks MAC address Attacks MAC address Attacks VLAN Hopping VLAN Hopping

VLAN Hopping : VLAN Hopping : 1- Switch spoofing 2- Double tagged attack

Switch spoofing

switch spoofing attack Mitigation switchport mode access switchport switchport nonegotiate

Double tagged attack

switchport trunk native vlan tagged Double tagged attack Mitigation ( Layer 3 Switch ) vlan dot1q tag native ( Layer 2 Switch )

MAC address Attacks : MAC address Attacks : 2- Mac Address Spoofing 1- CAM Flooding Attack

CAM Flooding Attack

CAM flooding attack Mitigation (config-if)#switchport port-security ? mac-address Secure mac address mac-address Secure mac address maximum Max secure addresses maximum Max secure addresses violation Security violation mode violation Security violation mode

Mac address spoofing Attack

CAM flooding attack Mitigation Dynamic ARP Inspection

1- DHCP Starvation DHCP Attacks : 2- DHCP Server Spoofing

DHCP Starvation

DHCP Server Spoofing

Spoofing & Starvation attack Mitigation DHCP Snooping dynamic ARP inspection

STP Spoofing Spoof Attack Sniff Attack

STP Spoofing

STP Spoofing Mitigation Root Guard BPDU Guard Access layer