Spanning Tree Protocol Attacks

Redundant Layer 2 topologies eliminate single points of failure, but they are more susceptible to broadcast storms, multiple frame copies, and MAC address table instability problems.

Spanning Tree Protocol (STP) is a Layer 2 protocol that provides a loop-free redundant network topology by placing certain ports in the blocking state. A hacker could manipulate STP to conduct an attack by changing the topology of a network (for example, by connecting a rogue switch in an attempt to take over as the root and have all traffic for the immediate switched domain flow through it).

STP Enhancement Features