To handle mac address security,  most cataylst series switches have a max
mac count command that only allow X number of mac address per port.  Set the
command to one.  The switch will only forward the one address.  All others
will be drop or forwarded to other ports.

William Harrison

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Russ Malko
Sent: Thursday, March 28, 2002 8:08 AM
To: [EMAIL PROTECTED]
Subject: RE: Anybody use "Port Security" on Switc [7:39457]


How do you protect yourself, security wise, when the user disconnects their
PC and re-connects a hub, which has the same MAC address programmed in to
mask any device connected to it.

Wouldn't it show the same MAC address for any device on that port?  Is there
a way to scan or monitor for this activity?

Curious,

Luke




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=39755&t=39457
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to