VLAN hopping or double tagging using “Yersinia”


Here an example in Video of “VLAN hopping” or “double tagging” using Linux tool “yersinia”.

Some recommendation to mitigate the threat of “VLAN hopping”
– Clear Native VLAN from All .1q Trunk.
– Put unused port into unused VLAN.
– Shutdown unused port.
– Configure user ports as static access.
– Filter tagged traffic entering access ports.
– Set native VLAN an unused VLAN.
– Do not use Default Native VLAN = 1.

Example of other tools:
– Mausezahn: http://www.perihel.at/sec/mz/index.html
– Scapy: http://www.secdev.org/projects/scapy/

Advertisements

About ajnouri
Se vi deziras sekure komuniki eksterbloge, jen mia publika (GPG) ŝlosilo: My public key for secure communication: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x41CCDE1511DF0EB8

8 Responses to VLAN hopping or double tagging using “Yersinia”

  1. Natasha says:

    There is a typo in the title: VLAN hopping or double tagging using “YersiAnia”

    • cciethebeginning says:

      Hi Natasha,
      Thank you for the precision, as much as “Yersinia” is not “YersiAnia” which is certainly not “MasiAnia” :-p she is funny for sure, but not a “geek” as much as I know 🙂

  2. Ashok says:

    Hi A.J,

    Really impressive and detailed information. A great resource for Networking guys. I have very recently launched a web site “http://www.networkers-google.com” to share practical experiences or lab notes which may not be documented anywhere. Appreciate your support to share anything in your experience which will help others.

    Regards…
    -Ashok.

  3. Ashok says:

    Hi AJ,

    BTB, I have just now added this URL into bookmarks section of my web site. The great resource which I have ever seen for Networking guys. I really loved the color diagrams and explanation given by you.

    Appreciate your efforts.

    -Ashok.

  4. cciethebeginning says:

    Thanks Ashok, you are welcome!

  5. cciethebeginning says:

    Thanks Ashok!

  6. Robert Bridges says:

    Just one question, I am admiring your diagrams and I just need to know are you using Visio? If so, what version? I really like your diagrams and they are very easy to read.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: