Lock Down IP-MAC-Physical Interface binding on ASA 5505?

Unanswered Question
Apr 18th, 2009
User Badges:


Is it possible to lock down an IP-MAC-Physical Interface binding similar to using port security or IP source guard on the physical ports of the ASA 5505? This is to prevent spoofing, man in the middle attacks and the connection of unauthorised devices.

I have tried making static MAC entries however this does not seem to be supported on the ASA 5505. I have also looked into the IP spoofing feature however this seems to be more for spoofing between VLANs (zones) than per physical interface.

Any suggestions will be greatly appreciated.


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)


This Discussion