The EVPN trust challenge: How to detect and contain internal MAC hijacks
Guest Post: EVPN MAC mobility enables seamless workload movement, but it can also amplify the impact of MAC spoofing. A forged MAC address can redirect traffic across the fabric through BGP, making access-layer controls, route-reflector visibility, and MAC-move monitoring critical defences.
Sources
- T1The EVPN trust challenge: How to detect and contain internal MAC hijacksAPNIC Blog / RIPE Labs / Internet Society / 3GPP