| Technique | Main Objective | Suggested Actions |
|---|---|---|
| SNMPv3 | Secure management traffic | Enable TSM/USM encryption & auth |
| RA Guard | Block spoofed IPv6 ads | Filter invalid RA messages |
| Port Security | Restrict switch port access | MAC locking, disable unused ports |
| ARP Inspection | Prevent ARP spoofing | Enable DHCP Snooping + DAI |
| Private VLANs | Logical device isolation | Configure Community/Isolated VLANs |
| DHCP Snooping | Block rogue DHCP servers | Trusted ports + binding table |
| ACL / RBAC | Traffic and access control | IP ACLs and role-based privileges |
| Wireless Security | Protect wireless connectivity | Strong PSK, EAP, isolation, MAC filters |
| IoT Security | Segmentation and monitoring | Dedicated VLAN, enable IDS/IPS |