Is it possible to detect an unauthorized switch on a LAN? My university IT department does not permit people from attaching their own switches to the network. I am interested in knowing if it is actually possible to detect them and circumvent detection?
Does a virtual Machine with bridged network connections make the host machine look like a switch? How can once analyze the traffic from a port to know if there is a switch downstream or if they are just virtual machines? I could change my physical machine MACs (first 3 octates) to be in the range of virtual machines, if MAC is the only way to distinguish switches from a VM.