Expanded

Securing the Switch for Cisco CCNA 200-125/100-105

This course will describe some of the most severe switch security risks and discuss the mechanisms to help mitigate attacks through the well-known vectors.
Course info
Rating
(37)
Level
Intermediate
Updated
Oct 10, 2016
Duration
2h 25m
Table of contents
Description
Course info
Rating
(37)
Level
Intermediate
Updated
Oct 10, 2016
Duration
2h 25m
Your 10-day individual free trial includes:

Expanded library

This course and over 7,000+ additional courses from our full course library.

Hands-on library

Practice and apply knowledge faster in real-world scenarios with projects and interactive courses.
*Available on Premium only
Description

Switches are fantastic devices, allowing you to create VLANs, trunks, as well as offer fast and somewhat private communication. However, the basic nature of switch operation, as well as the advent of trunk links, VLAN tags and some backwards compatibility features, created some extra security risks that were not anticipated upon the advent of the technology. In this course, Securing the Switch for Cisco CCNA 200-125/100-10, you will start off by learning about frame double-tagging. Next, you'll move onto the native VLAN security issues and DTP. You'll wrap up the course with a demonstration of creating a secure base configuration for a switch. By the end of this course, you'll know how to put a secure base configuration on a switch, mitigating many layer 2 attacks against Ethernet.

About the author
About the author

For nearly 20 years, Ross has taught and managed data networks.

More from the author
Network Management and Operations
Beginner
2h 4m
Sep 16, 2021
Network Concepts and Protocols
Beginner
5h 2m
Sep 15, 2021
More courses by Ross Bagurdes
Section Introduction Transcripts
Section Introduction Transcripts

Course Overview
Hi, everyone! My name is Ross Bagurdes and welcome to my course, Securing the Switch. I am a network engineer with 20 years experience building and managing Enterprise networks and teaching people about them. Switches may or may not have been part of the Ethernet vision when the Ethernet was being developed in the 70s and 80s. However, by the mid to late 1990s, switching became an important piece of data networking and has not stopped growing since. Because of this rapid implementation and growth of Ethernet and switching, there was not always an eye focused on security flaws in switch design, especially in trunk link operation. In this course we're going to cover the native VLAN and the security issues it creates, MAC address flooding of a switch, and switchport Port security which is a mechanism we can use to prevent some security issues. By the end of this course you'll know how to put a secure base configuration on an Ethernet switch, mitigating many layer-2 attacks against Ethernet. Before beginning the course you should be familiar with switching, VLANs, and VLAN trunking. From here you should feel comfortable diving into the rest of the CCNA series. I hope you'll join me on this journey to learn switch security with the Security the Switch course at Pluralsight.