Cisco Defenses against common Layer 2 Attacks

• Spanning Tree Attack

• Root Guard
• BPDU-Guard
• Layer-2 PDU Rate Limiter

• VTP Attacks
• MAC Flooding
  • Port Security
• MAC Spoofing
  • Port Security
  • DAI
• DHCP Attacks
  • Port Security
  • DHCP Snooping
• ARP Exploits
  • DAI
• IPv6 Exploits * Secure ND