#MAC TERMINAL EMULATOR EXHAUST MAC#

While this layer 2 security feature is not the best way to secure your layer 2 switches, it will in fact prevent CAM table poisoning on edge switches. By default this is to shutdown the interface and place it into ERR-DISABLED mode.

#MAC TERMINAL EMULATOR EXHAUST MAC#

When a switchport with port security configured with a maximum of 3 MAC Addresses receives a frame with a NEW SRC MAC address other then the 3 already known ones, it will trigger the administratively configured action. Port Security is a layer 2 security feature that limits Catalyst switchport(s) to only learn a configured amount of MAC addresses before triggering an administrative action such as disabling the port or restricting the port. So how exactly do we prevent CAM Table poisoning? Through the use of Port Security. For example, Server to Server communication or Client to Server communication that is unencrypted could easily be viewed by Wireshark in this type of attack. This in turn gives the attacker the ability to capture and analyze traffic on his computer to gather information destined to computers other then his computer. In a CAM Table Attack, the attacker attempts to flood the switch with bogus MAC addresses to exhaust the resources of the CAM table thus forcing the switch to forward received on a given interface out ALL interfaces in the attached VLAN. Among one of the other functions of the CAM table is to store the MAC Address Table. On a Cisco Catalyst Switch, are very specific microchips that are used to copy an Ethernet Frame one an ingress port to an Egress port based on SRC and DST MAC Address.

Unless you specifically read up on securing Cisco Switches, the CCNA Routing and Switching curriculum barely touches on this concept.ДЇirst off lets start out with what the CAM table is. When it comes to protecting your switching infrastructure, one thing that often gets overlooked is protecting the CAM table of Cisco Switches.

Mac terminal emulator exhaust