I have a Catalyst 2950 switch in my network, and i need to prevent unknown hosts from network access. There are 10 computers connected to this switch. And i want any of this computers can be connected to any port of switch. How can i make it? If i try to do it by using port-security and declare all mac-addresses of computers on all ports of switch, is says "Found duplicate mac-address xxxx.xxxx.xxxx".
Thanks for help.
This can be achieved by these methods:
1] Mac-Access List - recommended.
3] Port security - recommended.
4] 802.1X Authentication
You can create a mac access list LOCALMACHINES with about 10 mac addresses
like this :
mac access-list extended LOCALMACHINES
permit host xxxx.xxxx.xxxx any
**Please check if this supported in 2950
Please let me know if this was helpful.