3

I want to configure port-security on a c2960 cisco switch to allow maximum of 10 MAC addresses per port. However two of the switch ports will be connected to a Wi-Fi access point for wireless users. If more than 9 clients connect to the WiFi access point will a security violation occur?

6

That depends on how the access point is configured. If it's configured as a router you'll only see one address of the access point itself, but if it's configured as a bridge between the wireless and the wired network, you'll see a MAC address for every connected client.

  • its configured as an access point to the wired network not a router. – Manny265 Mar 6 '16 at 18:06
  • 3
    @Manny264, as a bridge, the WAP will look as if you had connected another switch to your switch port, and the switch port will see all the MAC addresses of every Wi-Fi client which has traffic come through the port. Bridges, like switches or WAPs, do not alter the MAC addresses in the frames. So, yes, a security violation will occur in you scenario. – Ron Maupin Mar 6 '16 at 18:31

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.