We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [security]

A general purpose tag to mark discussions of general security topics including firewalls, ACLs, AAA and numerous others related to keeping the network safe from unauthorized access.

Filter by
Sorted by
Tagged with
32
votes
8answers
7k views

How can I stop an intruder plugging into an Ethernet wall socket getting access to the network?

Is MAC address filtering the most suitable option to prevent someone connecting their own device to the network by plugging into Ethernet wall sockets? What if they unplug a device and clone its MAC?
15
votes
3answers
20k views

MPLS vs Encrypted VPNs - traffic security?

Why do people say a lot of times that they have two connections between two offices - the main one being over MPLS and the backup one over VPN. Why not run a VPN over MPLS too? Is MPLS secure? Can no ...
39
votes
11answers
35k views

How do you prevent rogue wireless access points on a network?

Depending on what type of traffic is going over the network, it's often not feasible that an employee brings a wireless router and sets it up into your network. This is because often, they are not or ...
7
votes
2answers
14k views

Securing Cisco device from brute force attacks

I'm trying to block users from configuring a Cisco IOS device if they have entered incorrect passwords a number of times. This is the command I'm using: Router(config)# login block-for 120 attempts 3 ...
7
votes
1answer
5k views

Configuring a password policy on Cisco IOS or NX-OS

I was wondering if it's possible at all to configure a password policy which enforces password complexity for locally defined accounts. I know it's possible for TACACS+ and RADIUS, but I need to know ...
4
votes
1answer
1k views

Cisco Catalyst 2960 X MAC access list

I am using a MAC access list on this switch, so I go about it by first creating the MAC access list: #conf t #mac access-list extended aclname # permit host XXXX.XXXX.XXXX any Then, I tie this list ...
4
votes
1answer
207 views

How do we prevent loss of sensitive information from MAC spoofing?

While IP addresses are often dynamically assigned during runtime, hardware addresses (so called MAC addresses) are usually statically allotted when a network interface card is manufactured. What ...
4
votes
1answer
1k views

What happens with tagged traffic on access port of Cisco switch?

I am broading up more this unanswered question: VLAN tagging and access port Let's assume I am trying to accomplish Double Tagging Attack. From my understanding, prerequisites of this attack is to be ...
4
votes
3answers
569 views

What practices/ mechanisms/ protocols can be used to secure communication on physically exposed Ethernet links?

Given that Ethernet cables are everywhere and use for all kinds of links and it is assumed they are physically guarded, hence typical installations do not leverage any "secure" mechanisms. Let's say ...
3
votes
2answers
137 views

Why do we allow Mac-Address to be changed by software?

In CISCO routers, they provide a provision to change the MAC-Address. My question is MAC-Address is supposed to be a burned-in address i.e. a permanent address. If we allow the mac-address to be ...
3
votes
2answers
408 views

Dynamic ARP Inspection - Does it check port in the binding database?

It is mentioned that DAI check for correct IP/MAC combination using the DHCP binding database. It is also mentioned that DAI is turned on for an entire VLan and not on a per port basis. If PCA (macA,...
2
votes
4answers
3k views

VLANS vs. subnets for network security and segmentation

What are the security implications when using subnets as opposed to VLANs for segmenting an enterprise network? We have strict security requirements surrounding the data we handle and need to ensure ...
1
vote
1answer
95 views

Unsecured devices and IPv6

I'm currently starting to read up on IPv6, and as soon as I heared that every device can/will have a public accessible adreess i got a little freaked out. There are a lot of horror stories about ...