Section 16.151 Port Security

Question 1

Port Security

Answer 1

A network switch feature that restricts device access to specific ports based on MAC addresses

■ Enhances network security by preventing unauthorized devices from connecting

Question 2

Network Switches

Answer 2

■ Networking devices that operate at Layer 2 of the OSI model

■ Use MAC addresses for traffic switching decisions through transparent bridging

■ Efficiently prevent collisions, operate in full duplex mode

■ Remember connected devices based on MAC addresses

■ Broadcast traffic only to intended receivers, increasing security

Question 3

CAM Table (Content Addressable Memory)

Answer 3

Stores MAC addresses associated with switch ports

■ Vulnerable to MAC flooding attacks, which can cause the switch to fail open

Question 4

Port Security Implementation

Answer 4

■ Associate specific MAC addresses with interfaces

■ Prevent unauthorized devices from connecting

■ Can use Sticky MACs for easier setup

■ Susceptible to MAC spoofing attacks

Question 5

802.1x Authentication

Answer 5

Provides port-based authentication for wired and wireless networks

Requires three roles:
● Supplicant: Device of the user request access to your network

● Authenticator: this is the device through which the supplicant is attempting to access the network such as a wirless switch or VPN concentrator

● Authentication server: which is going to be our centralised device
that performs the authentication. This is usually going to be configured as a RADIUS or TACACS+ server.

■ Prevents rogue device access

Question 6

RADIUS vs. TACACS+

Answer 6

■ RADIUS is cross-platform, while TACACS+ is Cisco proprietary

■ TACACS+ is slower but offers additional security and independently handles authentication, authorization, and accounting

■ TACACS+ supports all network protocols, whereas RADIUS lacks support for some

Question 7

EAP (Extensible Authentication Protocol)

Answer 7

■ A framework for various authentication methods
■ Has different variants which have their own features

Question 8

EAP (Extensible Authentication Protocol)

EAP-MD5

Answer 8

○ Uses simple passwords and the challenge handshake authentication process to provide remote access authentication

○ One-way authentication process

○ Doesn’t provide mutual authentication

Question 9

EAP (Extensible Authentication Protocol)

EAP-TLS

Answer 9

○ Uses public key infrastructure with a digital certificate which is installed on both the client and the server

○ Uses mutual authentication

Question 10

EAP (Extensible Authentication Protocol)

EAP-TTLS

Answer 10

○ Requires a digital certificate on the server, but not on the client

○ The client uses a password for authentication

Question 11

EAP (Extensible Authentication Protocol)

EAP-FAST

Answer 11

Uses protected access credential, instead of a certificate, to establish mutual authentication

Question 12

EAP (Extensible Authentication Protocol)

PEAP

Answer 12

○ Supports mutual authentication using server certificates and Active Directory databases to authenticate a password from the client

Question 13

EAP (Extensible Authentication Protocol)

EAP-LEAP

Answer 13

Cisco proprietary and limited to Cisco devices

Cisco devices only