1

Want to be sure I'm approaching this correctly.

I want to have a list of allowed MACs that can access any switch company wide (these devices can plug into any switch and be allowed access).

To do this I would have a list of the MAC addresses and then programmatically apply this list to each switch's switch ports I have enabled for port security.

Is there a different or more efficient way of going about this?

Improve this question
1
  • Port security can't have the same MAC address on multiple ports of the same switch, since that defeats the port security. MAC addresses are easily spoofed, so what you are proposing is a lot of work for very little return.
    – Ron Maupin ♦
    Commented Apr 19, 2016 at 13:17

1 Answer 1

Reset to default
4

Go for IEEE 802.1x Port-Based Authentication. Port security was not really designed for that.

HTH Adam

Improve this answer
3
  • I wanted to avoid having to go through setting up radius and authentication if possible. Is there a limit to the amount of allowed macs you can assign a switchport?
    – red888
    Commented Apr 19, 2016 at 11:30
  • Switch(config-if)#switchport port-security maximum ? <1-132> Maximum addresses The range is from 1 to 132 at least on a 2960.
    – cyzczy
    Commented Apr 19, 2016 at 13:20
  • If you set it to 2 you will get the following message when configuring the third MAC Total secure mac-addresses on interface FastEthernet0/1 has reached maximum limit.
    – cyzczy
    Commented Apr 19, 2016 at 13:27

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.