Network Security Principles and Practices

Edge Distribution Module

This module's goal is to aggregate the connectivity from the various elements at the edge. Traffic is filtered and routed from the edge modules and routed into the core.

Key Devices

• Layer 3 switches— aggregate edge connectivity and provide advanced services

Figure B-14. Edge Distribution Module: Detail

Threats Mitigated

• Unauthorized access— filtering provides granular control over specific edge subnets and their ability to reach areas within the campus

• IP spoofing— RFC 2827 filtering limits locally initiated spoof attacks

• Network reconnaissance— filtering limits nonessential traffic from entering the campus limiting ...