Network+ N10-009 · AP Networking pilot · Layer-2 Security

Harden an Access Switch: DHCP Snooping & Dynamic ARP Inspection

Cedar Hollow Public Library’s self-checkout kiosks suddenly started leasing addresses from the wrong gateway — someone plugged a small travel router into a public-floor jack and it began answering DHCP. You’re on the access switch CH-ACC-SW1. Lock the staff VLAN so only the library’s real DHCP server (reached through the uplink) can hand out leases, and stop ARP spoofing on the same VLAN.

Network+ N10-009: 4.3 — network security features & defenses AP Networking 3.3.A — DHCP AP Networking 2.2.B.6 — ARP AP Networking 3.2.B.3 — VLANs

CH-ACC-SW1 — Console (simulated IOS)

con0 · 9600 8N1 staff-vlan 30 · 172.22.30.0/24
CH-ACC-SW1>

Tasks

    Snooping integrity

    Check questions

    Tasks 0/6 · Questions 0/4