Chapter 10. MLS Optimization and Security

Terms you'll need to understand:

• SPAN, VSPAN, and RSPAN

• Network Analysis Module and RMON

• AAA and 802.1X

• VLAN ACLs

• Private VLANs

Techniques you'll need to master:

• Configuring SPAN and RSPAN

• Securing your switch

• Configuring AAA, port security, and 802.1X

• Using VACLs to secure your network

• Understanding the components and configuration of private VLANs

This chapter focuses on two areas: capturing traffic to optimize your network and switch security features. The first half of this chapter is dedicated to the SPAN feature of Catalyst switches. This feature enables you to capture traffic from one or more ports and redirect it to a port with a protocol analyzer or probe attached to it. The captured information can then be analyzed to assist you in troubleshooting and capacity planning.

The second half of this chapter covers some of the security features included with the IOS switching software. This includes basic security, such as assigning passwords, restricting access, and authenticating users (AAA and 802.1x). It also includes restricting traffic between ports on the switch by using VLAN access control lists (ACLs), port security, and private VLANs.