According to Cisco SAFE blueprint following points should be considered to maintain a secure L2 infrastructure.
01. Disable dynamic protocols like CDP, DTP on user / access ports.
02. Enable BPDU Guard & Root Guard to prevent STP attacks.
03. Use Dynamic ARP Inspection or Private VLANs to prevent frame sniffing.
04. Enable port security to at least limit the number of allowed MAC addresses.
05. Use DHCP Snooping & IP Source Guard to prevent DHCP DoS and MITM attacks.
06. Disable VTP or if using, configure VTP authentication globally on each switch.
07. Disable unused switch ports and place them in an unused VLAN.
08. Avoid using VLAN 1.
09. Do not use the native VLAN on trunks.
10. Configure Storm Control commands.
Reference: Cisco SAFE Blueprint
Practicals & Notes by CCDE #20240056
Hi there friends, good post and nice urging commented at this place, I
ReplyDeleteam truly enjoying by these.
Please let me know if you're looking for a article writer for your blog.
ReplyDeleteYou have some really great articles and I feel I would be a good asset.
If you ever want to take some of the load off, I'd absolutely love to write some
material for your blog in exchange for a link back to mine.
Please shoot me an email if interested. Many thanks!
Greate pieces. Keep writing such kind of info on your blog.
ReplyDeleteIm really impressed by your blog.
Hi there, You have done a great job. I'll certainly
digg it and in my view suggest to my friends. I am confident they'll be benefited from this site.
Hello! I know this is kinda off topic however I'd figured I'd ask.
ReplyDeleteWould you be interested in trading links or maybe guest authoring a blog post or vice-versa?
My website addresses a lot of the same subjects
as yours and I feel we could greatly benefit from each other.
If you happen to be interested feel free to shoot me an email.
I look forward to hearing from you! Superb blog by the way!
Thank you for another magnificent article. Where else may anyone get that type
ReplyDeleteof information in such an ideal approach of
writing? I have a presentation next week, and I am on the look for
such information.
Thanks for sharing your thoughts about rajaqq. Regards
ReplyDeleteDo you have any video of that? I'd love to find out more details.
ReplyDeleteIt's not my first time to visit this web page, i am visiting this
ReplyDeleteweb site dailly and get pleasant data from here daily.
My brother suggested I might like this website. He was totally right.
ReplyDeleteThis submit actually made my day. You cann't believe simply how a lot time I had spent for this information! Thank
you!
I believe what you published was actually very logical.
ReplyDeleteBut, what about this? suppose you typed a catchier title?
I mean, I don't want to tell you how to run your website, however
what if you added a headline to possibly get people's attention? I mean "L2 Security Recommendations from Cisco SAFE Blueprint" is a little plain. You should glance at Yahoo's front page and watch how
they create post titles to grab viewers to open the links.
You might try adding a video or a related picture or two to get people excited about everything've got to say.
In my opinion, it would make your website a little bit more interesting.
I know this if off topic but I'm looking into starting my own weblog and was wondering what
ReplyDeleteall is required to get setup? I'm assuming having a blog like yours would cost a pretty penny?
I'm not very internet savvy so I'm not 100% certain. Any suggestions or advice would
be greatly appreciated. Cheers
This is very interesting, You're a very skilled blogger.
ReplyDeleteI have joined your feed and look forward to seeking more of your wonderful post.
Also, I've shared your website in my social networks!
May I just say what a comfort to discover someone who actually knows what they are discussing
ReplyDeleteonline. You definitely realize how to bring an issue to light and make it important.
A lot more people need to read this and understand this side of the story.
It's surprising you are not more popular since you definitely have the gift.
You actually make it seem really easy along with your presentation but I to
ReplyDeletefind this matter to be really something which I believe I might by no means understand.
It seems too complex and extremely vast for me. I am looking forward on your subsequent publish,
I will attempt to get the hold of it!
Thanks for ones marvelous posting! I definitely enjoyed reading it,
ReplyDeleteyou are a great author. I will always bookmark
your blog and definitely will come back someday. I want to encourage you to definitely continue your great job,
have a nice morning!
Heya this is kind of of off topic but I was wondering if blogs use WYSIWYG editors or
ReplyDeleteif you have to manually code with HTML. I'm starting a blog soon but have no coding knowledge so I wanted to get advice from someone with experience.
Any help would be greatly appreciated!
It's hard to find well-informed people on this topic, but you sound like you know what you're
ReplyDeletetalking about! Thanks
I think that is among the so much significant info for me.
ReplyDeleteAnd i am happy studying your article. But wanna remark on some normal things, The website taste is wonderful, the articles is really great : D.
Just right job, cheers
Ridiculous quest there. What occurred after? Take care!
ReplyDeleteDo you mind if I quote a few of your articles as long as I provide credit and sources back to your blog?
ReplyDeleteMy blog is in the exact same niche as yours and my visitors would certainly benefit from
some of the information you provide here. Please let me know if this
ok with you. Thanks!
hello!,I really like your writing very so much! percentage we keep up a
ReplyDeletecorrespondence extra approximately your post on AOL? I require an expert in this area to solve my
problem. Maybe that's you! Having a look forward to peer you.
I am sure this paragraph has touched all the internet users, its
ReplyDeletereally really nice post on building up new blog.
Greetings! Very useful advice in this particular post!
ReplyDeleteIt is the little changes that will make the largest changes.
Many thanks for sharing!
Hello Dear, are you in fact visiting this web site regularly, if so
ReplyDeleteafter that you will without doubt get fastidious experience.
Hey there! I just want to give you a huge thumbs up for the
ReplyDeleteexcellent info you have right here on this post.
I will be returning to your web site for more soon.
Wow, amazing weblog structure! How lengthy have you ever been blogging for?
ReplyDeleteyou make blogging glance easy. The total glance of your web site is fantastic, as
smartly as the content!
thanks. Passive
ReplyDeleteNetworking