MAC-LIMITING ON 2950 & 2960 Switch

netops044 · ‎07-14-2010

Hi,

1) I have a 2950 switch on my network edge. All customers are coming on a trunk port where only customer VLANs are allowed.

2) I need to limit the number of mac-addresses on a particular VLAN to 10.

3) No restrictions are allowed on any other VLAN.

I checked the below URLs: http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/12.2/25sg/configuration/guide/port_sec.pdf.

As per this, even though mac-limiting for specific VLANs can be acheived using the 'port-security' feature, the MACs associated with VLANs which are not specifically defined would still get restricted. Any idea on how I can leave the rest of the VLANs unrestricted?

Nagaraja Thanthry · ‎07-15-2010

Hello,

It seems like 2950 platform does not support per port MAC limiting feature. It is supported in other platforms like 2960 and 3560/3750

http://www.cisco.com/en/US/customer/docs/switches/lan/catalyst3750/software/release/12.2_44_se/configuration/guide/swtrafc.html#wp1155336

http://www.cisco.com/en/US/docs/switches/lan/catalyst2960/software/release/12.2_25_see/configuration/guide/swtrafc.html#wp1155336

Hope this helps.

Regards,

NT