Re: port filtering

From: Tim Fletcher (tim@fletchmail.net)
Date: Mon Mar 17 2003 - 17:51:49 GMT-3


Here's a simple solution. I don't know if there are any other requirements
that might make this solution invalid.

interface FastEthernet 0/16
  switchport port-security maximum 1
  switchport port-security mac-address 0800.E4D3.A2D1
  switchport access vlan 100
!
interface Vlan100
  ip address 12.3.1.2 255.255.255.252

Any thoughts?

-Tim Fletcher

At 08:10 AM 3/17/2003 -0800, ccie1@hotmail.com wrote:
>I know this has been discussed before, but i have tried some of the solutions
>people have posted and they dont seem to work:
>
>I want to only allow mac-address 0800.E4D3.A2D1 with ip address 12.3.1.1 on
>port fast-etjhernet 0/16 on my 3550. The requirement is to not use layer 3 or
>layer 2 access-lists. I tried using port-security with the mac-address but
>that doesnt seem to work. Does anyone have any ideas on how to do this?
>
>thanks in advance



This archive was generated by hypermail 2.1.4 : Sat Apr 05 2003 - 08:51:41 GMT-3