Layer 2


need pretty complex switch configs

port security, mac lockdown etc

filter out carp announcements where using multicast mode

LACP and RSTP

turning ports on and off
all unused ones are off