![]() ![]() The next way which is more convenient is to configure a “ Sticky” MAC address and leave the max MAC addresses to its default value of one. The first way being that you configure a static MAC address when configuring port-security on a specific interface. There are two ways to configure a sticky port. In this case you can sticky the port that the wan router is connected to preventing unauthorized device swaps like such. For example you have a small site location with a 1841 router and a 3560-8pc switch and an end user gets the bright idea to swap the 1841 with a WRT54G because he wants wireless and wired network connectivity. ![]() (To make things more complicated: The acceptance of the commands even varies between platforms: a 3560 w/ 12.2(50)SE4 allows both commands, a Cat3550 w/ 12.If you completed the previous lab Configuring Dynamic Switchport Security than you’ll be pretty much up to speed in this lab.ĭynamic port security is great but what about when you connect switches to routers or other devices that need to be secured in a way to prevent unauthorized device swapping in the network. Why would one want to use the second command, if the first one does the job of entering the address into the secure MAC table and the configuration?Ī theory for the second command: Is it possible that the switch only adds the address to the table and eventually raises the counted addresses (towards the maximum limit) if it is actually *seen* on the port? So as long as that listed sticky address is not seen on the port, other dynamic addresses may "use up" the max counter before the stated one becomes active (and get's blocked in the process)? Switchport port-security mac-address sticky 1234.5678.9012 ![]() ![]() Switchport port-security mac-address 1234.5678.9012 I don't get why we have two possibilities to add a MAC address to the configuration: I have another questions related to the subject, maybe one of you knows the answer: ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |