Non-working interfaces

[haithamnofal]

Hi,

If I have interfaces which are up but were left with no IP addresses; is there any risk for L2 attacks here if somebody got physically connected to any of them?

Regards,

Haitham

[joshua.walton]

First thing you should do is shut them down if your not using them. If for some reason you have to have them up, make sure the interface configurations are empty. No VLANS, no DHCP, etc.. Having said this brings up my first recommendation, shut the ports down.

Please rate if you are satisfied.

Cheers!

[haithamnofal]

Hi,

So, if you don't have DHCP or VLANs configured what attacks or issues you would be concerned of when not having the interfaces being shutdown?

Thanks,

Haitham

[joshua.walton]

Physical attacks (person plugging a PC into the port directly)

This is why you have the ports shutdown and even have them assigned to a null vlan.