newer Catalysts do not offer the ISL trunk mode anymore. Now I fear VLAN-hopping/encapsulation attacks when using VLANs for WAN-isolation.
- What can I do to prevent such attacks?
- Can I mix ISL and 802.1Q trunk connections?
- Anything else I have to consider?
Thanks
edit:
Is VLAN-hopping possible if all hosts are connected to "Static Access"-configured switchports and the 802.1Q-trunks are only between the Cisco switches?