Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I was wondering if someone could help me with the needed cisco commands to configure a switch to only allow certain mac addresses on certain ports. So that one mac adres can only connect to the network through a specific port.

Also how to be able to configure to use port 24 as a trusted port and have all other ports set as untrusted (while still using the above mentioned allowing certain MAC addresses on specific ports)

This would be greatly appreciated!

Thanks in advance, Dempsey

share|improve this question

1 Answer 1

You can do that using many switch cisco features, something like:

port-security

set port security 1/1-2 enable            # enable port security
set port security 1/1-2 port max 5        # allow 5 MAC address
set port security 1/1-2 violation protect # drop packet beyond 5 MAC address

mac access-list

mac access-list extended ARP_Packet # creat ARP access-list

permit host X.X.X host Y.Y.Y # define action, allow or deny

end

static MAC

arpa X.X.X IP

Hope this helps.

share|improve this answer
    
I will try it out and let you know ;) Thanks for the information! ;) –  Dempsey FoxDie Van Assche May 20 '13 at 12:27
    
Edit: I've tried to figure it out but I haven't been able to find anything related to the commands you gave regarding port-security. Are these commands accurate? Thanks in advance! –  Dempsey FoxDie Van Assche May 20 '13 at 13:01
    
You can refer here: cisco.com/en/US/products/hw/switches/ps646/… –  Gnouc May 20 '13 at 13:06

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.