Lab 8-1 Securing the Layer 2 Switching Devices

More documents

Recommendations

Info

! ! interface FastEthernet0/15 switchport access vlan 100 switchport mode access switchport port-security maximum 2 switchport port-security mac-address sticky dot1x port-control auto spanning-tree portfast ip dhcp snooping limit rate 20 ! interface FastEthernet0/16 switchport access vlan 100 switchport mode access switchport port-security maximum 2 switchport port-security mac-address sticky dot1x port-control auto spanning-tree portfast ip dhcp snooping limit rate 20 ! interface FastEthernet0/17 switchport access vlan 100 switchport mode access switchport port-security maximum 2 switchport port-security mac-address sticky dot1x port-control auto spanning-tree portfast ip dhcp snooping limit rate 20 ! interface FastEthernet0/18 switchport access vlan 100 switchport mode access switchport port-security maximum 2 switchport port-security mac-address sticky dot1x port-control auto spanning-tree portfast ip dhcp snooping limit rate 20 ! interface FastEthernet0/19 switchport access vlan 100 switchport mode access switchport port-security maximum 2 switchport port-security mac-address sticky dot1x port-control auto spanning-tree portfast ip dhcp snooping limit rate 20 ! interface FastEthernet0/20 switchport access vlan 100 switchport mode access switchport port-security maximum 2 switchport port-security mac-address sticky dot1x port-control auto spanning-tree portfast ip dhcp snooping limit rate 20 ! interface FastEthernet0/21 switchport access vlan 100 switchport mode access switchport port-security maximum 2 switchport port-security mac-address sticky dot1x port-control auto spanning-tree portfast 16 - 19 CCNP: Building Multilayer Switched Networks v5.0 - Lab 8-1 Copyright © 2009, Cisco Systems, Inc
ip dhcp snooping limit rate 20 ! interface FastEthernet0/22 switchport access vlan 100 switchport mode access switchport port-security maximum 2 switchport port-security mac-address sticky dot1x port-control auto spanning-tree portfast ip dhcp snooping limit rate 20 ! interface FastEthernet0/23 switchport access vlan 100 switchport mode access switchport port-security maximum 2 switchport port-security mac-address sticky dot1x port-control auto spanning-tree portfast ip dhcp snooping limit rate 20 ! interface FastEthernet0/24 switchport access vlan 100 switchport mode access switchport port-security maximum 2 switchport port-security mac-address sticky dot1x port-control auto spanning-tree portfast ip dhcp snooping limit rate 20 ! ! interface Vlan1 ip address 172.16.1.101 255.255.255.0 no shutdown ! ip default-gateway 172.16.1.1 ! ! line con 0 password cisco login line vty 0 4 password cisco line vty 5 15 password cisco ! end ALS1# show run Building configuration... ! ! hostname ALS2 ! enable secret cisco ! ! ip dhcp snooping vlan 100,200 ip dhcp snooping ! ! interface FastEthernet0/7 switchport mode trunk 17 - 19 CCNP: Building Multilayer Switched Networks v5.0 - Lab 8-1 Copyright © 2009, Cisco Systems, Inc
Page 1 and 2: Lab 8-1 Securing the Layer 2 Switch
Page 3 and 4: ALS1(config-if)#ip address 172.16.1
Page 5 and 6: ALS2#configure terminal Enter confi
Page 7 and 8: Step 5 To protect against MAC flood
Page 9 and 10: Second, you configure the trusted i
Page 11 and 12: 5. Will DHCP replies be allowed on
Page 13 and 14: enable secret cisco ! ip routing !
Page 15: no shutdown ! interface Vlan200 ip
Page 19: ip dhcp snooping limit rate 20 ! in

Lab 8-1 Securing the Layer 2 Switching Devices

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?