Security - BPDU Guard, BPDU Filter, Root Guard and Protected Switchports

Рет қаралды 4,641

Rob Riker's Tech Channel

5 жыл бұрын

Пікірлер: 25

@rizhmian 5 жыл бұрын

Rob, it was a great lecture. Thank you.

@miguelcjoseph1585 4 жыл бұрын

Awesome, thank you sir. Was wondering around to better understand BPDU guard, and filter from an attack perspective to have a clear understanding. Thank you again, was refreshing.

@tinkering-thoughts 5 жыл бұрын

Awesome stuff. Easy to understand your teaching

@brendanbass5495 5 жыл бұрын

This was awesome

@noelrakshit 4 жыл бұрын

Hey Rob, it ways a great video. I have a question. Is it advisable to configure BPDU guard on non-edge ports? I understand that this is used towards the edge ports and not allowing any rouge switches to access. but what in the case of an existing ring?

@RobRikerTechChannel 4 жыл бұрын

Bad idea, if a BPDU is received, the port goes down. NOT advisable at all.

@davidtrevor8967 2 жыл бұрын

Hello Rob, imagine another device sending BPDUs connected to the switch with BPDU Filter on. Are the BPDU frames getting forwarded by the switch to other ports?

@TPOneMedia 4 жыл бұрын

Great tutorial , what software is that ?

@RobRikerTechChannel 4 жыл бұрын

EVE-NG

@user-yb1xq3xd4i Ай бұрын

holy fuck i tihnk its beyond ccna

@it-fre4ki 4 жыл бұрын

How many RAM have your EVE-NG Server? What are the specs?

@RobRikerTechChannel 4 жыл бұрын

128 GB RAM. Intel Xeon processors that support Intel VTX

@warman 3 жыл бұрын

What program is that which shows the networks?

@RobRikerTechChannel 3 жыл бұрын

EVE-NG community

@ChatBuck 3 жыл бұрын

Hi Rob, do you have any advice for a KVM environment within a server in a DC that uses BDPU Guard. We have found a vulnerability that allows a customer to create a bridge, and send STP which then causes the Cisco switch to disable. So far we are unable to find a solution.

@RobRikerTechChannel 3 жыл бұрын

What about BPDU filter, it drops the incoming BPDU, but doesn't error disable the port. Not sure if your looking for that or the customer side. I'd have to know more about the situation to advise.

@ChatBuck 3 жыл бұрын

@@RobRikerTechChannel Hi Rob, thanks for the reply. This wont work because it would need to be enabled in each customers VM which is not possible to do. What we need really is something to sit between customers VM's and our Port to filter these. I have reached out to you on Twitter also and would love to possibly commission yourself for a few hours to come up with a solution.

@RobRikerTechChannel 3 жыл бұрын

I'm sure we can figure something out.

@ChatBuck 3 жыл бұрын

@@RobRikerTechChannel I have sent you an email, thanks for reaching out.

@ChatBuck 3 жыл бұрын

@@RobRikerTechChannel Hi Rob have you had time to look at this? We are just really keen to patch this up