Loading lesson

Layer 2 security features: port security, DHCP snooping, and dynamic ARP inspection

Security fundamentals · Lesson 4 of 7

Lesson 4 of 7

Ask a tutor

Lesson 4 of 7 · Security fundamentals

Layer 2 security features: port security, DHCP snooping, and dynamic ARP inspection

3 quick checks≈3% of the testCore

Reading is free. Sign in to tick off lessons, keep your place and track your mastery.

By the end you’ll be able to

Configure and verify switch port security, including secure MAC address learning, maximum MAC limits, sticky learning, and violation modes.
Explain common switch access-layer threats addressed by port security, DHCP snooping, and dynamic ARP inspection.
Configure and verify DHCP snooping, including trusted and untrusted ports and VLAN-specific operation.

0% read

Configure and verify dynamic ARP inspection and identify its dependency on DHCP snooping bindings or ARP ACLs.

Interpret switch behavior during Layer 2 security events, including port-security violations, blocked rogue DHCP responses, and invalid ARP inspection failures.

This lesson hasn’t been written yet

CCNA lessons are written from the official syllabus the first time a learner opens them, then saved for everyone. Sign in and this one is written for you in a minute or two. It’s free.

Sign in Create a free account