topic Re: Port Security in Network Security

Port Security

mohammedalrawiib — Sun, 31 Dec 2023 08:13:20 GMT

Hi i have been studying about port security how do they set Port Security in an ISP how can they handle all the MAC-Flooding attack

it would be really helpful if you put your resources or any books that can help evolve my knowledge

best regards.

Re: Port Security

M02@rt37 — Sun, 31 Dec 2023 09:48:56 GMT

Hello @mohammedalrawiib

Port security is often implemented at the network edge to control which devices can connect to the network.

From an ISP perspective, the implementation of storm control is a common practice to manage and control excessive broadcast, multicast, or unknown unicast traffic. Storm control helps prevent network disruptions caused by an overwhelming volume of such traffic. Dtorm control is just one element of a comprehensive network management and security strategy.

Apply rate limiting on specific types of traffic to control the rate at which certain packets are sent or received. This can help prevent network congestion and protect against certain types of attacks.

Re: Port Security

balaji.bandi — Sun, 31 Dec 2023 09:58:56 GMT

There are many products available in the market to prevent not only DDoS attack or many other attacks.

I have used some time back RADWARE for DDOS protection :

https://www.radware.com/2023-h1-global-threat-analysis-report/#menu-tab-ddos-protection

Some good explanation - i collected when i was reading in the context of security.

https://datadome.co/learning-center/how-to-stop-ddos-attacks/

Re: Port Security

MHM Cisco World — Sun, 31 Dec 2023 10:02:58 GMT

I have ONE ISP with SW and many CE,
the costumer use PPPoE or use DHCP to get IP from ISP.
then this SW must protect by
Port-security (or use DHCP client-ID, this protect ISP from any unknown device)
use Storm-control to control the limit of broadcast send from CE to ISP

MHM