Edge Distribution Module This module's goal is to aggregate the connectivity from the various elements at the edge. Traffic is filtered and routed from the edge modules and routed into the core.

Key Devices Layer 3 switches— aggregate edge connectivity and provide advanced services

Figure B-14. Edge Distribution Module: Detail

Threats Mitigated Unauthorized access— filtering provides granular control over specific edge subnets and their ability to reach areas within the campus

IP spoofing— RFC 2827 filtering limits locally initiated spoof attacks

Network reconnaissance— filtering limits nonessential traffic from entering the campus limiting.