.. _cisco_common_attack_defences:

##############################################
Cisco Defenses against common Layer 2 Attacks
##############################################

* Spanning Tree Attack

 * :ref:`Root Guard <cisco_rootguard>`
 * :ref:`BPDU-Guard <cisco_bpduguard>`
 * Layer-2 PDU Rate Limiter

* VTP Attacks

* MAC Flooding

  * :ref:`Port Security <cisco_portsecurity>`

* MAC Spoofing

  * :ref:`Port Security <cisco_portsecurity>`
  * :ref:`DAI <cisco_dai>`

* DHCP Attacks

  * :ref:`Port Security <cisco_portsecurity>`
  * :ref:`DHCP Snooping <cisco_dhcp_snooping>`

* ARP Exploits

  * :ref:`DAI <cisco_dai>`

* IPv6 Exploits
  * Secure ND