---
# System prepended metadata

title: Занятие 5. Безопасность локальной сети

---

# Занятие 5. Безопасность локальной сети

ARP Spoofing
Атака
![](https://i.imgur.com/zeOUrch.png)

![](https://i.imgur.com/PjbTM1l.png)

![](https://i.imgur.com/JLXmvKl.png)

![](https://i.imgur.com/Ja7z2zr.png)

![](https://i.imgur.com/rd5ImxW.png)

Защита

![](https://i.imgur.com/RbioBWj.png)

![](https://i.imgur.com/h8hV99T.png)

![](https://i.imgur.com/nTdiN1a.png)

Защита успешно реализована
![](https://i.imgur.com/LALdPok.png)


DHCP атака

![](https://i.imgur.com/d5ftEDH.png)

![](https://i.imgur.com/VrHkpwj.png)

![](https://i.imgur.com/96FnZAO.png)
Получилось всего 15 запросов, тк отработал dhcp-rete-limit

![](https://i.imgur.com/LQrwOUG.png)


DHCP starvation

![](https://i.imgur.com/1VrCLZH.png)

![](https://i.imgur.com/TPe8vjg.png)

Чтобы защититься нужно настроить dhcp-rete-limit


![](https://i.imgur.com/j48tHwS.png)
Чтобы защититься от Rogue защита с указанием доверенных портов



Переполненик CAM таблицы
![](https://i.imgur.com/8eKxJsf.png)

![](https://i.imgur.com/dKIff3Y.png)

![](https://i.imgur.com/o26SmGB.png)

![](https://i.imgur.com/a6TaZuX.png)

![](https://i.imgur.com/Ebn2uqE.png)
атака удалась много новых адресов 


защита
![](https://i.imgur.com/doagakK.png)


сработала защита, отключение порта
![](https://i.imgur.com/y2USHTr.png)

![](https://i.imgur.com/GkvwgMh.png)

![](https://i.imgur.com/ZsrIJW6.png)

![](https://i.imgur.com/ny8W7UN.png)


mac spofing 
![](https://i.imgur.com/l7O61xc.jpg)


![](https://i.imgur.com/05veKsK.jpg)

![](https://i.imgur.com/EvtYrdH.jpg)

![](https://i.imgur.com/q583sPR.jpg)

VLAN hopping
![](https://i.imgur.com/dv0LEvO.png)

![](https://i.imgur.com/b8dNe7R.png)

![](https://i.imgur.com/QSItBot.png)

![](https://i.imgur.com/rIsMX3u.png)


acl
![](https://i.imgur.com/gMOyPcV.jpg)


![](https://i.imgur.com/tdQRODl.jpg)

![](https://i.imgur.com/qdNlL0s.jpg)


![](https://i.imgur.com/qyqWnGr.jpg)