Recruitment of security features for securing VTP3 domain in campus environment

摘要

Campus network encounters serious security threats because of its expandable size and curious users. Due to the dramatic increase of network technologies and the urgent need to perform the work accurately, campus network is one example that now compels to step in with new trends confronted. This could be adopting robust technologies in order to reach high security, availability and globality. Standing with these trends needs to use new effective weapons to face security threats. One of those weapons could be using means of separating large broadcast to smaller parts by using VLANs. VLAN aspect offers a handy tool to reduce threats inside. However, the administration scene looks scary especially with an expandable network such as university because keeping an update VLAN database needs time, cost and the result could be inaccurate. Curiosity and enthusiasm are a common trait of university students, which represent the main concern of network management and the most serious challenges. This paper explores two kinds of threats (accidental and intentional) facing campus environment (Çankaya University case study) and offers the solution for these problems through employing a practical tool to manage the network complexity and security. This tool is represented by VTP v.3 with some enhancements in configuration to guarantee security and the update for VLAN database. Moreover, closing any probable threat comes from end user ports by employing BPDU guard feature with particular ACL for authorized employees.