Hi, It is a network from 20 Layer2 switches (24 , 48 ports). Network has security problems with IP Spoofing attacks. Using Layer2 switches, we can just link MAC address to port, but not the IP.
How can we protect Layer 2 network against IP Spoofing with minimum investment?
I thought to buy a Cisco core switch with VALC feature. After that to configure each port of each L2 switch on separate VLAN. After that to make VACL rules on core switch against IP spoofing (to link IP with VLAN ID). In this case the clients from the same L2 switch will comunicate via L3 core switch. I don't know if L3 core switch will handle with such amount of traffic.
