From: Donny MATEO (donny.mateo@sg.ca-indosuez.com)
Date: Fri Feb 07 2003 - 01:15:02 GMT-3
How about trying to disable arp on the interface, configure a port security and set a static arp entry.
something like
arp 1.1.1.1 a.b.c arpa
int fa0/1
switchport port-secure maximum 1
switchport portsecure mac-address a.b.c
no arp arpa
no arp snap
no arp probe
end
I dont' have a notebook lying around and I sure don't have a 3550 atm, but give it a try and let us know. The idea is to force the interface not to learn any mac-address, althoughI dunno if this will work or not.
Donny
Evgeny Tantsura
<ivgen@castel.nl> To: Gustavo Figueira <gufigueira@ig.com.br>
Sent by: cc: "Sanfilippo, Ted" <Ted.Sanfilippo@PaeTec.com>, <ccielab@groupstudy.com>
nobody@groupstudy Subject: Re: 3500 security
.com
07-02-2003 04:40
Please respond to
Evgeny Tantsura
Hi,
Have you found how to configure this ?
The example in the mail doesn't work.
On Thu, 16 Jan 2003, Gustavo Figueira wrote:
> Use this:
>
> (config-if) switchport port-secure
> (config-if) switchport port-secure maximum 1
> (config-if) switchport port-secure mac-address xxx.yyy.zzz
>
> arp 10.10.10.1 xxx.yyy.zzz arpa interface
>
> and tell me if is ok.
>
> Gustavo
>
> ----- Original Message -----
> From: "Sanfilippo, Ted" <Ted.Sanfilippo@PaeTec.com>
> To: <ccielab@groupstudy.com>
> Sent: Wednesday, January 15, 2003 7:13 PM
> Subject: 3500 security
>
>
> > Anyone now how to to only allow a specific IP and MAC address to attach to
> > an interface without using Access-lists?
> >
> > Ted
> > .
> .
With kind regards/ met vriendelijke groeten,
------------------------------------------------
E. Tantsura
Network Developer
Essent Kabelcom N.V.
Dr.van Deenweg 84
8025BN Zwolle, The Netherlands
Tel: +31-(0)38-850-7642
Fax: +31-(0)38-850-7410
Mob: +31-(0)6-290-80458
------------------------------------------------
.
This message is for information purposes only and its content
should not be construed as an offer, or solicitation of an offer,
to buy or sell any banking or financial instruments or services
and no representation or warranty is given in respect of its
accuracy, completeness or fairness. The material is subject
to change without notice. You should take your own independent
tax, legal and other professional advice in respect of the content
of this message. This message may contain confidential or
legally privileged material and may not be copied, redistributed
or published (in whole or in part) without our prior written consent.
This email may have been intercepted, partially destroyed,
arrive late, incomplete or contain viruses and no liability is
accepted by any member of the Credit Agricole Indosuez group
as a result. If you are not the intended recipient of this message,
please immediately notify the sender and delete this message
from your computer.
.
This archive was generated by hypermail 2.1.4 : Sat Mar 01 2003 - 11:06:14 GMT-3