CCNP
STP Loop Guard STP Loop Guard can provide additional protection against layer 2 loops. An STP loop can happen when a port that is in the STP blocking state changes into a forwarding state. Loop Guard Can Add Additional Checks In the case that the designated port stops receiving BPDU’s then that port is moved…
Radius vs TACACS+ Quick Comaparison of Radius vs TACACS+ Radius TACACS+ UDP 1812, 1645 (Authentication), 1813, 1646 (Accounting) TCP 49 Created by IETF, Open Standard Created by Cisco, Open Standard Password Only Full Packet Encryption Uniderectional CHAP Bidirectional CHAP Low resource dependent Requires more resources No command logging Full logging of commands Used for…
Implementing Cisco IP Switched Networks (300-115) Exam Description: Implementing Cisco IP Switched Networks (SWITCH 300-115) Exam Time: 120-minutes Number of questions: 45?55 Exam Cost: $300.00 (as of September 2018) Testing Information: Pearson Vue What does the exam prove? switching knowledge and skills including the planning, configuring, and verifying the implementation of complex enterprise switching solutions…
DHCP Snooping What is DHCP Snooping? CCNP 300-115 Switch – 2.0 Infrastructure Security – – 2.1a DHCP Snooping What is it? DHCP Snooping is a Layer 2 Security Feature. What does it solve? Prevents Unauthorized/rogue servers. How does it solve the problem? DHCP Snooping drops DHCP Traffic that is not acceptable on the…
Storm Control What is Storm Control? CCNP 300-115 Switch – 2.0 Infrastructure Security – – 2.1f Storm Control Storm control is a security feature that prevents LAN Storm Attacks by monitoring traffic on ports. What is a LAN Storm Attack? A land storm attck is when all ports in the same VLAN are…
What: IP Source Guard Is: A security feature What it does; Restricts IP traffic on untrusted Layer 2 ports. It uses the DHCP snooping binding database to filter traffic. Or Manually configured IP source bindings IP source bindings. Purpose: Helps prevent IP spoofing attacks.