Episode 154: Network Hardening Essentials — SNMP, Router Advertisements, and Port Security

Hardening your network means reducing its attack surface and securing its services. In this episode, we look at three high-priority hardening practices: securing SNMP, managing router advertisements, and implementing port security. You’ll learn how to disable or reconfigure SNMPv1/v2 in favor of SNMPv3, ensuring encrypted and authenticated device monitoring. Misconfigured SNMP can expose internal IP structures and community strings to attackers, so locking it down is critical.

We also cover rogue router advertisements that can redirect traffic or disrupt IPv6 networks. Using tools like RA Guard helps control these threats. Finally, we revisit port security at the switch level, limiting MAC addresses and monitoring for violations. This episode gives you actionable configurations that prevent unauthorized access, reduce visibility to attackers, and tighten your network’s defensive perimeter.