MAC Authentication

[brad182]

Does anyone know wether its possible to imoplement mac access lists on a C2900XL Software (C2900XL-C3H2S-M), Version 12.0(5)WC7, i.e access-list 701 ... yadda ydda yadda.
If not, any ideas on how else to perform mac authentication rather than ip from this switch.
cheers
brad

 

[brad182]

Well if anyone would like to know.....

from global configuration...
mac-access-table secure <MAC ADDRESS> <PORT>

also from interface configuration...
port security max-mac-count <number of macs allowed to be learnt>

port security action [shutdown/trap]
..either shutdown the interface or send snmp trap when the mac rules are broken

 

[lui3]

cool

i was going to recommend port security

also look at switchport protect command for enabling private vlan edge ports

and broadcast control with

storm-control commands

neat aspects of layer 2 security