Information Security #3 - 2004
, , Cisco Systems
, .
, .
, . .
, Ethernet-, , , (). . Ethernet.
-, . , . , . .
1. , , - . , - 5 . - , , . , , , , , , . .
2. , MAC- , , "". , , . , .
, , Port Security. , , -, "" . . MAC- .
ARP
ARP IP- MAC-. ARP .
1. ARP ARP- , . ARP " ". . , . ARP-, , IP- MAC- . ARP-, , IP- , Ethernet- , MAC- . , , IP-.
2. " ". ARP-, IP- MAC-.
3. ARP- , , " " ARP- . , , .
ARP- , Cisco Catalyst. ARP- DHCP (Dynamic ARP Inspection - DAI). IP- MAC-, DHCP. IP- MAC-, .
DHCP
DHCP TCP/IP . , , , . DHCP .
1. , , DHCP DHCP- DHCP- . DHCP- , " ". DHCP- , .
2. " " DHCP-. IP-, MAC- , DHCP-.
DHCP DHCP- DHCP Snooping, Cisco Catalyst. , DHCP- DHCP- (DHCP Relay). DHCP-, . , DHCP Snooping DHCP-, MAC- , MAC- Ethernet.
, DHCP, ARP- Dynamic ARP Inspection, IP- IP Source Guard.
-
, . , , .
"Cisco SAFE: Security Architecture for Enterpise". " ", .
, , Cisco Catalyst . Port Security, BPDU Guard, Dynamic ARP Inspection, DHCP Snooping, IP Source Guard Control Plane Policing. , .
