Cisco Network Security: Secure Routing and Switching

Learn how to secure Cisco routers and switches, mitigate Layer 3 and Layer 2 attacks, and secure a VLAN.

Introduction

• Welcome
• What you need to know
• Packet Tracer and exercise files
• Prepare for the CCNA Security exam

1. Secure Routing and Switching

• Secure routing and switching: Overview
• Control, data, and management planes
• Router and switch security basics

2. Securing Cisco Routers

• Layer 3 attacks: Overview
• Secure the control plane
• Examine privilege levels
• Assign privilege levels
• Configure IOS role-based CLI access
• Implement IOSR Resilient Configuration
• Routing update authentication
• Challenge: EIGRP authentication
• Solution: EIGRP authentication

3. Security on Cisco Switches

• Layer 2 attacks: Overview
• Spanning-Tree Protocol
• STP attacks
• ARP spoofing
• MAC spoofing
• macof attack
• CDP/LLDP reconnaissance
• DHCP spoofing

4. Mitigation Procedures

• Implement DHCP snooping
• Dynamic ARP inspection
• Implement port security
• BPDU guard, root guard, and loop guard

5. VLAN Security

• VLAN attacks
• Security implications of a PVLAN
• Security implications of a native VLAN

Conclusion

• Next steps