Solved

Port security on Catalyst 3560 switch.

Posted on 2010-08-26
3
653 Views
Last Modified: 2012-05-10
I have a Catalyst 3560 switch. I want to block a port to only allow traffic from 1 MAC address. How do I do this?
0
Comment
Question by:neptuneit
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 3

Expert Comment

by:Shaun
ID: 33533295
0
 
LVL 17

Expert Comment

by:Kvistofta
ID: 33533739
interface FastEthernet0/4
 switchport mode access
 switchport port-security
 switchport port-security maximum 1

end


/Kvistofta
0
 
LVL 9

Accepted Solution

by:
ffleisma earned 500 total points
ID: 33540589
Switch(config)#interface FastEthernet X/X
Switch(config-if)#switchport mode access
Switch(config-if)#switchport port-security
Switch(config-if)#switchport port-security maximum 1
Switch(config-if)#switchport port-security mac-address 0006.5b02.a841
Switch(config-if)# switchport port-security violation {shutdown | restrict | protect}

shutdown - port goes to err-disable
restrict - port stays up but packets are droped and can send SNMP trap and syslog
protect - port stays up but packets are droped, no record is kept or syslog message sent

you can also try
Switch(config-if)#switchport port-security mac-address sticky
instead of
Switch(config-if)#switchport port-security mac-address
command.

with sticky option, the switch gets and stores the mac-address of the first device you plug-in

hope this helps :-)
0

Featured Post

Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Cisco Switch 3560 - Vlans, Access-lists and Routing 3 85
traffic flow without STP 9 56
Split my switch into 2 switches 4 51
HP 1920 Switch -- IFNET LINK_UPDOWN Errors 3 85
The worst thing when starting a new job is when the previous Network Administrator left behind no documentation. How do you get into the devices? If you've been in this situation or just accidently mistyped your password, this article will hopefully…
Arrow Electronics was searching for a KVM  (Keyboard/Video/Mouse) switch that could display on one single monitor the current status of all units being tested on the rack.
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question