|
|
Question : Problem: How do i apply multiple mac addresses on multiple ports for port security.
|
|
I have got a training room which has got 12 network points. I need to ensure that these 12 network points provide connectivity only to 12 desktops and 5 laptops. Any desktop or any laptops can connect on any of these 12 points. i tried the following switchport port-security maximum 16 switchport port-security switchport port-security violation protect switchport port-security mac-address 1111.2222.3333 switchport port-security mac-address 4444.5555.6666 switchport port-security mac-address 7777.8888.9999 switchport port-security mac-address 0000.1111.2222 switchport port-security mac-address 3333.4444.5555 switchport port-security mac-address 6666.7777.8888 switchport port-security mac-address 9999.0000.1111 switchport port-security mac-address 2222.3333.4444 switchport port-security mac-address 5555.6666.7777 switchport port-security mac-address 8888.9999.0000 switchport port-security mac-address 1234.5678.9012 switchport port-security mac-address 3456.7890.1234 switchport port-security mac-address 5678.9012.3456 switchport port-security mac-address 7890.1234.5678 switchport port-security mac-address 9012.3456.7890
When i enter these commands on one port it accepts it. The moment I enter this same command on another port on the same switch it says duplicate mac address. So I tried using a access list. mac access-list extended allowed permit host 1234.5678.9012 any permit host 3456.7890.1234 and applied this acl on a interface.
It still does not work. If i connect any other device on this port it gets connected. Is there a way to do what i want via the IOS only. My aim is to allow 16 desktops+ laptops to connect to any of the 12 ports in my training room. Apart from these none other should get connected.
|
Answer : Problem: How do i apply multiple mac addresses on multiple ports for port security.
|
|
I think we should close this question.Donjohnston seems to be a expert at answering and i agree he has helped me. please award the points which I have already done and close this question. One thing to be remembered is there are many such tech support sites. I come to experts exchange only becasue i get good solutions and not half baked ones. I guess next time onwards I will do what don has said and go to some other providers for queries. Attitude does not go down well.with consumers. In the end it is a consumer oriented world.if you dont get what you wnat you dont buy. as simple as that.
|
|
|