One Comment on “What are two security features at the access port level that can help mitigate Layer 2 attacks?”

1. JackP says:

   November 17, 2017 at 1:03 am

   Answer is correct:

   °DHCP Snooping = DHCP snooping acts like a firewall between untrusted hosts and DHCP servers. You use DHCP snooping to differentiate between untrusted interfaces connected to the end user and trusted interfaces connected to the DHCP server or another switch
   °IP Source Guard= P source guard is a security feature that filters traffic based on the DHCP snooping binding database and on manually configured IP source bindings in order to restrict IP traffic on non-routed Layer 2 interfaces

   https://www.cisco.com/c/en/us/support/docs/switches/catalyst-3750-series-switches/72846-layer2-secftrs-catl3fixed.html#dhcpsnoop

   
   
   
   0

   
   
   
   0