Moves traffic between subnets - often resides within a switch (called layer 3 switch, because normally switches are layer 2)
. List of rules within a firewall or router - security policies - basically variables called tuples that either allow or disallow traffic on the ingress or egress
. Security function of the router that will disallow inappropriate IP ranges from coming in and enforce reverse path forwarding
. Layer 2 device that directs traffic based on MAC address
. What the switch routes traffic based on
. This is what is used to secure internal switch ports (we are talking about physical ports on the switch - not TCP/UDP ports)
. NAC standard - uses RADIUS and EAS for authentication
. Enabled on switches to prevent loops which can easily bring a network down if allowed; it will reconfigure itself when needed
. STP standard
. Configure a maximum number of MACs on a network at once to prevent a flooding DoS
. A switch that has routing capability built in
.