Questions tagged [switch]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
6 views

Encryption between two switches [migrated]

We have two offices located across the street and the distance allows us to keep everything in one LAN without going through the Internet. However, it seems to require some MITM protection, since the ...
2
votes
1answer
67 views

What are the cons of dhcp snooping, dynamic arp inspection and ip guard?

I read about a couple of layer 2 protections against dhcp starving, mac and ip spoofing- ip guard, dhcp snooping and dynamic arp inspection. Are there any cons or vulnerabilies which enable bypassing ...
0
votes
0answers
30 views

MAC Flooding detection

I am interested in the metrics of the attack. Is there any packet rate that can be considered a reasonable threshold to detect this attack from traffic perspective? Or this is completely connected to ...
0
votes
1answer
86 views

Intercept network traffic with a hub [closed]

If I plugged a hub inbetween a switch and firewall, that also had a device running wireshark or similar capture software connected, due to the way a hub operates, would I be able to read ALL of the ...
0
votes
1answer
352 views

What are the risks resulting from having a switch without strong access control directly facing the Internet?

At home I have a connection to my provider via glass fiber that provides two VLANs: IPTV and Internet. The structure of the network is exactly as shown in the following image, except for the phone ...
1
vote
1answer
313 views

Can you scan unmanaged switches with vulnerability scanners?

The target switches do not have IP addresses and most scanners require IPs as targets. Can you scan unmanaged switches with vulnerability scanners? What scanners can target layer 2?
0
votes
1answer
177 views

Router vs router + switch security

I need to add some more ethernet devices to my network. I'd like to keep the current router and the only possibility to add more interfaces would be USB ethernet / PCI ethernet adapters. I could also ...
1
vote
1answer
53 views

How WPA supplicant can determine whether switch supports authentication or not?

If a client(supplicant) configure to perform EAP-TLS authentication connects with a switch which doesn't requires authentication. How can supplicant determine that authentication is not required and ...
4
votes
2answers
455 views

What is the attack surface on a L2 switch?

I'm trying to figure out what makes a "top brand" switch better than a "cheap unknown brand" one with the same features. I often see security thrown in the mix, but really can't understand how this ...
0
votes
1answer
151 views

Do HP ProCurve 1810G Config files have password hashes or other sensitive info?

I'm backing up some switches and I'm wondering if this config file should be kept secure. It is in binary so I do not know what it contains. What do the config files contain?
2
votes
1answer
198 views

Security considerations for USB keyboard/mouse switches

I am considering purchasing a basic USB keyboard/mouse switching box in order to allow me to use the same keyboard and mouse with two different physical machines. This is similar to a KVM (keyboard ...
1
vote
1answer
965 views

Is VLAN Hopping through switch spoofing possible without DTP?

I've been reading about Switch Spoofing for some homework, and found that the attack is based on Cisco DTP protocol. In case I want to replicate the attack in class, I would use HP switch 2510 from ...
1
vote
1answer
321 views

Scanning a network via a hardline connection to a wired-switch NIC in promiscuous mode

Question from a CEHv9 exam preparation book: "When scanning a network via a hardline connection to a wired-switch NIC in promiscuous mode, what would be the extent of network traffic you would ...