[c-nsp] port security / prevent learning mac address

Mack McBride mack.mcbride at viawest.com
Tue Jul 10 12:59:21 EDT 2012


The best method would be to isolate those devices on a single vlan and use port security for everything on that vlan.

Mack

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Mike
Sent: Saturday, July 07, 2012 11:47 AM
To: 'Cisco-nsp'
Subject: [c-nsp] port security / prevent learning mac address

Hello,

	Is there a cisco feature that will learn a mac address on a port, and then refuse to learn that mac address from any other source? I have a small number of some critical network devices that I'd like to make sure cannot have their mac addresses spoofed or usurped due to loops or other network causes. How would this work? I have a 3560 with ipbase software.

Mike-

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/



More information about the cisco-nsp mailing list