Only Allowed Clients

[cscisco_admin]

Hi!

I have two Cisco 2960 Switches. Is it possible to use them to allow computers having specific MAC Addresses only and restrict all others or is there any other way to restrict the computers from reaching my internal network that are not part of my domain?

Thanks!

[kwillacey]

Is this on the same vlan or a different vlan? You could use vacls or an acl on the layer switch that connects these switches.

[davy.timmermans]

if the computers on those switches are static (they don't move to other ports).

You might have a look into port-security

interface fas0/1

switchport port-security

switchport port-security maximum 1

switchport port-security violation restrict

switchport port-security mac-address MAC

if you need more flexibility, you might look to dot1x but these option requires a radius server.

[kankung]

You can also consider dot1.x authentication

http://www.cisco.com/en/US/docs/switches/lan/catalyst2960/software/release/12.2_46_se/configuration/guide/sw8021x.html

Hope this help.