RE: Shutting down switch ports after inactivity

From: Scott Morris (smorris@ipexpert.com)
Date: Sun Mar 25 2007 - 13:29:38 ART


A script would certainly give you the ability to do this...

You may also consider implementing something like 802.1X which can have
timeouts involved AND give a further step of authentication.

I'm not sure if that will work within whatever other specs you have, but
it's a good thought to push, meeting your goals AND adding to the security
of your network!

 
Scott Morris, CCIE4 (R&S/ISP-Dial/Security/Service Provider) #4713, JNCIE
#153, CISSP, et al.
CCSI/JNCI-M/JNCI-J
IPexpert VP - Curriculum Development
IPexpert Sr. Technical Instructor
smorris@ipexpert.com
http://www.ipexpert.com
 
 

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Cacca Mucca
Sent: Sunday, March 25, 2007 11:43 AM
To: lab; cisco@groupstudy.com
Subject: Shutting down switch ports after inactivity

Got a question for the group.

I have a requirement to shutdown inactive switch ports, some after 6 hours
and others after 10 days.

Looking at port security commands, there is not one present that can
accomplish this. The aging time is to age out old mac addresses.

I think the answer is going to be running some kind of script, which I know
very little about.

I'd like to hear from anyone having similar requirement and what you are
doing to meet it, besides doing it manually.

TIA



This archive was generated by hypermail 2.1.4 : Sun Apr 01 2007 - 06:35:52 ART