Layer 2 Port Security on CIsco ASA 5505 mac address sticky

[ben.reynolds]

Guys,

We are planning to install a cisco ASA on an ezvpn environment and at some of the locations building security may not great. In order to prevent access if somebody takes our ASA and connects it somewhere else we would like to lock down the switchports. It clearly looks like it's not supported on this model looking at the CLI. Any ideas on how to lock down these interfaces at layer2?

[Karsten Iwen]

locking down the mac addresses is not supported. But EzVPN gives you the possibility to authenticate each user individually that want's to communicate through the VPN (Individual user authentication). Perhaps thats a workaround for you?