VLAN hopping or double tagging using “Yersinia”
July 12, 2010 8 Comments
Here an example in Video of “VLAN hopping” or “double tagging” using Linux tool “yersinia”.
Some recommendation to mitigate the threat of “VLAN hopping”
- Clear Native VLAN from All .1q Trunk.
- Put unused port into unused VLAN.
- Shutdown unused port.
- Configure user ports as static access.
- Filter tagged traffic entering access ports.
- Set native VLAN an unused VLAN.
- Do not use Default Native VLAN = 1.
Example of other tools:
- Mausezahn: http://www.perihel.at/sec/mz/index.html
- Scapy: http://www.secdev.org/projects/scapy/
