Defense in Depth Protecting your Netowrk for Internal Attacks

...some tips on how to stop someone from exploiting vulnerabilities in your network by turning on some simple security features in your switches. Most people don’t know that the switches in their network can give a solid defense against several attack vectors. This article will focus on how just a few lines of configuration can harden your network to prevent the following attacks:

• DHCP starvation
• Rogue DHCP servers
• Client side exploitation
• ARP spoofing
• ARP poison routing
• VLAN hopping
• MAC address flooding
• Connection of Rouge devices

This article illustrates configuration on products from Cisco Systems, which are most likely
already in use in your network. If you aren’t using Cisco products consult your vendor’s
literature to see if the equivalent commands/protections are available.

http://pauldotcom.com/Defense%20in%20Depth%20Protecting%20your%20Netowrk%20for%20Internal%20Attacks.pdf