New answers tagged

0

I will agree with everyone else that MAC filtering is a poor way to go. But if you have no other option, and you understand the weakness of this approach, there are a few things you can do that are simpler than messing with MAC ACLs. Enable port-security on the switch. With this you can Restrict each port to a limited number of MAC addresses. You can set ...


2

802.1x is the answer here. Attempting to limit access by MAC ACL is a game of whack-a-mole. One resorts to these measures when the users cannot be trusted -- they'll plug in devices they aren't supposed to. Modern operating systems allow changing the MAC. If I know any allowed MAC, I can set my device to that address and have access. Yes, it will create a ...


Top 50 recent answers are included