Port Security based on Device Type

walter.perera · ‎04-15-2009

Hi all:

We need to know whether there is any feature or software that allows to block switch ports for type of devices.

For instance, we have some switches for IP phones and we do not want to have PCs connected to those ports.

We know that it can be done using MACs, but, as phones can be moved easily, it implies constant changes on port security.

Thanks

Regards

AxiomConsulting · ‎04-16-2009

Apologies if I have not understood the original question, however, can you use port security (max MAC / sticky MAC) to ensure only devices that are currently connected are successful, other violations will result in the port being shutdown.

You may want to investigate some 802.1x device authentication

http://www.cisco.com/en/US/products/ps6662/products_ios_protocol_option_home.html

HTH

Steve

walter.perera · ‎04-16-2009

Hi Steve:

Thanks for your reply. The problem to use that option is that users change desks quite often and then change their phones also, therefore it could imply lot of changes in the switches port security as every time the phone changes to a new port, configuration has to be done.

That's why we thought of any command / product that could control which type of device is connected to a switch port.

Thanks

Regards