ccna acl pdf

ccna acl pdf.using port security, BPDU protection, and root protection to deal with MAC address table overflow attacks using storm control to mitigate LAN storm attacks.6.5 Summary 185Control VLAN attacks by disabling DTP and following basic trunk port configuration guidelines.Enterprise networks today deploy wireless, VoIP, and SAN devices, all of which require specialized security solutions. Wireless technologies are the most vulnerable to network attacks. There is already a plethora of technologies available to mitigate these attacks. As VoIP adoption becomes more widespread, security concerns for VoIP technology have emerged. Recent research advances in VoIP security have addressed these issues. SAN technology enables faster, easier, and more reliable access to data. The protection of data is critical, so technologies have emerged to specifically protect the SAN to ensure data integrity and privacy.Chapter 7 Cryptographic SystemsThis chapter describesProtection of the network can be achieved through hardware hardening, AAA access control, firewall features, and IPS. These combined features protect the infrastructure and end devices within the local network as well. But how should network traffic be protected when it passes over the public Internet? The answer is to use encryption.The principles of cryptography can be used to explain how modern protocols and algorithms can be used to protect communications. Cryptography is the science of developing and breaking passwords. The development and use of ciphers is called cryptography, and the breaking of ciphers is called cryptanalysis. o Cryptography has been used for centuries to protect secret documents. For example, Julius Caesar used a simple alphabetic cipher to encrypt messages sent to his generals on the battlefield. His generals knew the keys needed to decrypt these messages.Today, modern cryptography is used in a variety of ways to secure communications. For example, many modern networks use protocols (such as Hash Message Authentication Code, HMAC) to ensure authentication. Integrity is then ensured by implementing MD5 or SHA hashing algorithms. Data confidentiality is ensured by symmetric encryption algorithms (including DES, 3DES, and AES) and asymmetric encryption algorithms (including RSA and PKI).