LAB: securing Layer 2 switches