This MSc Thesis focuses on principles, practical performability and security against four attacks used in contemporary local-area networks: CAM Table Overflow capable of capturing traffic in switched networks, ARP Man-in-the-Middle, whose target is to redirect or modify traffic and against two variants of VLAN Hopping attack allowing a hacker to send and capture data from VLANs he has no access to.

En undersökning om hur Zero-Touch Provisioning (ZTP) kan effektivisera nätverksstu-denters laborationstillfällen, med speciellt fokus på Högskolan Västs studenter och lokaler. ZTP kan liknas vid plugin & play, det vill säga att ingen aktiv konfigurering från använda-ren krävs för att konfigureringen skall appliceras på nätverksenheterna. Konfigurering skickas i stället med hjälp av DHCPv4 och TFTP, vilka är installerade på en Ubuntu-server.Utförda tester visar en stark trend att ZTP tog kortare tid att applicera grundkonfiguration för att nå managementinterface via SSH. Även om ZTP är okänslig för tidslösande mänsk-liga felinmatningar av konfiguration, så visar tester att samma trend håller sig under både optimala och ”normala” förhållanden.

<p>The objective of this thesis is to design and implement a small scaleInternet Service Provider (ISP) for the NetCenter sub department atMälardalen University. The ISP is intended to give NetCenter a networkseparate from the University’s network, providing them with a moreflexible environment for lab purposes. This will give their students anopportunity to experience a larger backbone with Internet accessibility,which has not been previously available. At the same time it will place theteachers in control of the network in the NetCenter lab premises.The network is designed with a layered approach including an Internetaccess layer, a larger core segment and a distribution layer with aseparated lab network. It also incorporates both a public and a privateserver network, housing servers running e.g. Windows Active Directory,external DNS services, monitoring tools and logging applications. TheInternet access is achieved by peering with SUNET providing a full BGPfeed.This thesis report presents methods, implementations and results involvedin successfully creating the NetCenter ISP as both a lab network and anInternet provider with a few inevitable shortcomings; the most prominentbeing an incomplete Windows Domain setup.</p>

The objective of this thesis is to design and implement a small scaleInternet Service Provider (ISP) for the NetCenter sub department atMälardalen University. The ISP is intended to give NetCenter a networkseparate from the University’s network, providing them with a moreflexible environment for lab purposes. This will give their students anopportunity to experience a larger backbone with Internet accessibility,which has not been previously available. At the same time it will place theteachers in control of the network in the NetCenter lab premises.The network is designed with a layered approach including an Internetaccess layer, a larger core segment and a distribution layer with aseparated lab network. It also incorporates both a public and a privateserver network, housing servers running e.g. Windows Active Directory,external DNS services, monitoring tools and logging applications. TheInternet access is achieved by peering with SUNET providing a full BGPfeed.This thesis report presents methods, implementations and results involvedin successfully creating the NetCenter ISP as both a lab network and anInternet provider with a few inevitable shortcomings; the most prominentbeing an incomplete Windows Domain setup.

his semestral´s thesis deals with proposal and system implementation for automatic configuration of Cisco network devices. This system is called AutoConf and it is intended for distant copying configuration files from eagle-server to the switches and routers in Cisco academy laboratory. It is handled by web pages placed on eagle-server. In this system, user can create new laboratory exercises with configuration files for network devices and then these files could be used for configurations. Informations about done configurations are saved in relation database MySQL. Network devices which will be configured by system AutoConf have to be connected with eagle-server. To setup their connection settings was created decision-making mechanism. If it detects physical connection between network device and eagle-server before network device starts, it will set network device for communication with eagle-server.

This diploma thesis deals with the design and implementation of a tool for network attack detection from a captured network communication. It utilises the tshark packet analyser, the meaning of which is to convert the input file with the captured communications to the PDML format. The objective of this conversion being, increasing the flexibility of input data processing. When designing the tool, emphasis has been placed on the ability to expand it to detect new network attacks and on integrating these additions with ease. For this reason, the thesis also includes the design of a complex declarative descriptions for network attacks in the YAML serialization format. This allows us to specify the key properties of the network attacks and the conditions for their detection. The resulting tool acts as an interpreter of proposed declarative descriptions allowing it to be expanded with new types of attacks.