Re: 3550 security

From: Mark Vann (linuxmanvan@yahoo.com)
Date: Sat Dec 14 2002 - 20:48:04 GMT-3


Heh, using an ip access list on the switched caused a
bug for me, the whole switch would not pass traffic.
Just my .02
--- Bob Sinclair <bsin@cox.net> wrote:
> I think the IP information in the question is a red
> herring - it is there
> only to complicate and confuse. If your port is a
> layer 2 port, then by
> definition it has no knowledge of the IP address. I
> would do port security
> using the MAC address and leave it at that.
>
> -Bob Sinclair
> CCIE #10427
>
> ----- Original Message -----
> From: "Massimiliano Tognon" <mtognon@tecnonetspa.it>
> To: <ccielab@groupstudy.com>
> Sent: Saturday, December 14, 2002 5:57 AM
> Subject: 3550 security
>
>
> > hi folks, question for you...
> > how can i secure a 3550 port?
> > question is :
> > i can allow only 1 pc with specific mac-address
> (something like
> > 3333.4444.5555) AND specific IP ADDRESS (something
> like 192.168.1.8).
> > for mac-address i think to use port security, but
> what can i use for ip
> > address?
> > 3550 fasteth is a layer 2 port not a routed
> (layer3) port...
> > any idea ?
> >
> > thanks
> > .
> .
>



This archive was generated by hypermail 2.1.4 : Fri Jan 17 2003 - 17:21:46 GMT-3