Informe

LAN Switch Security
What Hackers Know About Your Switches
Eric Vyncke and Christopher Paggen, CCIE No. 2659

Cisco Press
Cisco Press 800 East 96th Street Indianapolis, IN 46240 USA

ii

LAN Switch Security
What Hackers Know About Your Switches
Eric Vyncke Christopher Paggen Copyright© 2008 Cisco Systems, Inc. Published by: Cisco Press 800 East 96th Street Indianapolis, IN 46240 USAAll rights reserved. No part of this book may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage and retrieval system, without written permission from the publisher, except for the inclusion of brief quotations in a review. Printed in the United States of America First Printing August 2007 Library ofCongress Cataloging-in-Publication Data: Vyncke, Eric. LAN switch security : what hackers know about your switches / Eric Vyncke, Christopher Paggen. p. cm. ISBN 978-1-58705-256-9 (pbk.) 1. Local area networks (Computer networks)--Security measures. 2. Telecommunication--Switching systems-Security measures. I. Paggen, Chris. II. Title. III. Title: What hackers know about your switches. TK5105.7.V962008 005.8--dc22 2007030673 ISBN-13: 978-1-58705-256-9 ISBN-10: 1-58705-256-3

Warning and Disclaimer
This book provides information about vulnerabilities linked to Ethernet switches and how to prevent or mitigate attacks against a switch-based network. Every effort has been made to make this book as complete and as accurate as possible, but no warranty or fitness is implied. The information isprovided on an “as is” basis. The authors, Cisco Press, and Cisco Systems, Inc., shall have neither liability nor responsibility to any person or entity with respect to any loss or damages arising from the information contained in this book or from the use of the discs or programs that may accompany it. The opinions expressed in this book belong to the author and are not necessarily those ofCisco Systems, Inc.

iii

Trademark Acknowledgments
All terms mentioned in this book that are known to be trademarks or service marks have been appropriately capitalized. Cisco Press or Cisco Systems, Inc., cannot attest to the accuracy of this information. Use of a term in this book should not be regarded as affecting the validity of any trademark or service mark.

Corporate and GovernmentSales
The publisher offers excellent discounts on this book when ordered in quantity for bulk purchases or special sales, which may include electronic versions and/or custom covers and content particular to your business, training goals, marketing focus, and branding interests. For more information, please contact U.S. Corporate and Government Sales 1-800-382-3419 corpsales@pearsontechgroup.com.For sales outside the United States, please contact International Sales international@pearsoned.com.

Feedback Information
At Cisco Press, our goal is to create in-depth technical books of the highest quality and value. Each book is crafted with care and precision, undergoing rigorous development that involves the unique expertise of members from the professional technical community. Readers’feedback is a natural continuation of this process. If you have any comments regarding how we could improve the quality of this book, or otherwise alter it to better suit your needs, you can contact us through e-mail at feedback@ciscopress.com. Please make sure to include the book title and ISBN in your message. We greatly appreciate your assistance. Publisher Associate Publisher Cisco RepresentativeCisco Press Program Manager Executive Editor Managing Editor Development Editor Senior Project Editor Copy Editor Technical Editors Editorial Assistant Designer Composition Indexer Proofreader Paul Boger Dave Dusthimer Anthony Wolfenden Jeff Brady Brett Bartow Patrick Kanouse Dan Young San Dee Phillips Sheri Cain Earl Carter and Hank Mauldin Vanessa Evans Louisa Adair Mark Shirar Tim Wright...