Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Mac-address reservation

Dear All,

We plan to configure all running (Registered) MAC-address to each and every port in the Switch. So that any only the configured mac-address can connect to the switch port. when a new pC with different mac-address try to connect to any of the switch it should not get the connectivity.

What is the maximum mac-address can be configured in a Switch port?

We need to block all new PC with different mac-address. can we do the same way which we plan or is there any other method which we can do it.

We have the below mentioned Switch model.

Catalyst WS-C3560G-48TS

Catalyst WS-C2950T-48-SI

Catalyst WS-C2960-48TC-L

Thanks

Shib

2 REPLIES

Re: Mac-address reservation

Hi

Assuming that u want to apply mac-address reservation for the current switch ports u can use the below commands under the interfaaces

switchport port security

switchport port security mac-address sticky--this is going to learn the present mac-address which is connected to this port.

switchport port security mac-address maximum 1

switchport port security violation shutdown

u can configure any number of mac-address on the switchport not sure about the number,

We need to block all new PC with different mac-address. can we do the same way which we plan or is there any other method which we can do it.

i didnt understand the above para can u elaborate on it.

Thanks

Mahmood

New Member

Re: Mac-address reservation

Hi,

Thanks for the quick response.

We have 5 switches connected in our branch office network. all the users are allowed to shift / connect to any switch port.

Now we are asked to collect the registered Mac-address from all the five switches and configure the same Mac-addressess in all the switch port in ll the switches.so that only the configured Mac-address bearing PC only will be able to get the connectivity.

We want to block the swith port when anyone brings there laptop to connect to our network.

Please guide us to configure this.

Thanks

278
Views
0
Helpful
2
Replies