vlan - trunk - vtp(vtp prune) stp portfast rootgurd bpduguard bpdufilter uplinkfast backbonfast loopguard udld rstp mstp protected vlan pvlan - 链路捆绑和高可用(双活) ether-channel hsrp 端口安全 dhcp欺骗(耗尽攻击&假冒攻击): 参考 http://www.cnblogs.com/iiiiher/p/8080314.html arp攻击