You could also use Spanguard to automatically block ports receiving BPDUs. Enable globally, then define edge port status. See page 7-26 of the SecureStack A2 configuration guide.
Jon Ambrosia * Enterprise Network Specialist, San Diego Community College District * CONFIDENTIALITY: This email (including any attachments) may contain confidential, proprietary and privileged information, any unauthorized disclosure or use is prohibited. If you received this email in error, please notify the sender and delete this email from your system. Thank you. -----Original Message----- From: Enterasys Customer Mailing List digest [mailto:[email protected]] Sent: Tuesday, September 28, 2010 9:13 PM To: enterasys digest recipients Subject: enterasys digest: September 28, 2010 ENTERASYS Digest for Tuesday, September 28, 2010. 1. One MAC Address por porta no A2 2. RE: One MAC Address por porta no A2 (UNCLASSIFIED) 3. AW: One MAC Address por porta no A2 4. Re: One MAC Address por porta no A2 (UNCLASSIFIED) ---------------------------------------------------------------------- Subject: One MAC Address por porta no A2 From: Andrey Tavares <[email protected]> Date: Tue, 28 Sep 2010 22:31:09 +0300 (GMT+03:00) X-Message-Number: 1 Hello, I'm needing to prevent routers / switching are plugged into my network. For that, I thought to allow only one MAC address per port. I know this is possible in the A2, but I do not remember the command. Could someone help me? -- Andrey Tavares Núcleo de Tecnologia da Informação (NTi) - UNIVASF ---------------------------------------------------------------------- Subject: RE: One MAC Address por porta no A2 (UNCLASSIFIED) From: "Pomikala, Donavan Mr CIV USA IMCOM" <[email protected]> Date: Tue, 28 Sep 2010 13:48:24 -0600 X-Message-Number: 2 Classification: UNCLASSIFIED Caveats: FOUO I do not have any A series but on the C2 you use the command set maclock firstarrival ge.1.1-23 1 Donavan Pomikala -----Original Message----- From: Andrey Tavares [mailto:[email protected]] Sent: Tuesday, September 28, 2010 1:31 PM To: Enterasys Customer Mailing List Subject: [enterasys] One MAC Address por porta no A2 Hello, I'm needing to prevent routers / switching are plugged into my network. For that, I thought to allow only one MAC address per port. I know this is possible in the A2, but I do not remember the command. Could someone help me? -- Andrey Tavares Núcleo de Tecnologia da Informação (NTi) - UNIVASF * --To unsubscribe from enterasys, send email to [email protected] with the body: unsubscribe enterasys [email protected] Classification: UNCLASSIFIED Caveats: FOUO ---------------------------------------------------------------------- Subject: AW: One MAC Address por porta no A2 From: "Dennis Flemmig" <[email protected]> Date: Tue, 28 Sep 2010 21:52:22 +0200 X-Message-Number: 3 Hi, The commands are : Set maclock enable (to enable it globally) Set maclock enable fe.1.1 (to enable it on the specific port) Set maclock firstarrival fe.1.1 1 (allows only the first mac) But it won't prevent that a router is plugged into one of that ports. Because then the A2 will only see 1 MAC ( that of the connected router interface) on that port. Regards Dennis --------------------------------------------- Mit freundlichen Grüßen / Best Regards Dennis Flemmig , Dipl.Ing.(FH) Systemingenieur BELL Computer-Netzwerke GmbH Paulusstraße 22 53227 Bonn Tel.: +49 (228) 42104-48 Mobil.: +49 (160) 90419332 Fax: +49 (228) 42104-30 E-mail: [email protected] Web: www.bell.de Geschaeftsfuehrer: Dipl. Ing. Tobias Groene Sitz der GmbH: Bonn HRB 6444 Amtsgericht Bonn ---------------------------------------------- Via BlackberryMail ________________________________ Von: Andrey Tavares An: Enterasys Customer Mailing List Gesendet: Tue Sep 28 21:31:09 2010 Betreff: [enterasys] One MAC Address por porta no A2 Hello, I'm needing to prevent routers / switching are plugged into my network. For that, I thought to allow only one MAC address per port. I know this is possible in the A2, but I do not remember the command. Could someone help me? -- Andrey Tavares Núcleo de Tecnologia da Informação (NTi) - UNIVASF * --To unsubscribe from enterasys, send email to [email protected] with the body: unsubscribe enterasys [email protected] ---------------------------------------------------------------------- Subject: Re: One MAC Address por porta no A2 (UNCLASSIFIED) From: "Parker, Jason" <[email protected]> Date: Tue, 28 Sep 2010 20:23:01 -0400 X-Message-Number: 4 I suggest that you set the number to 0 and assign a static address on the ports not in use Then assign a address on the port when you want to use the port or attach the Pc on the port and set to first learned or learn it and use the move command Jason On Sep 28, 2010, at 2:49 PM, "Pomikala, Donavan Mr CIV USA IMCOM" <[email protected]> wrote: > Classification: UNCLASSIFIED > Caveats: FOUO > > I do not have any A series but on the C2 you use the command > > set maclock firstarrival ge.1.1-23 1 > > Donavan Pomikala > > > -----Original Message----- > From: Andrey Tavares [mailto:[email protected]] > Sent: Tuesday, September 28, 2010 1:31 PM > To: Enterasys Customer Mailing List > Subject: [enterasys] One MAC Address por porta no A2 > > Hello, > > > > I'm needing to prevent routers / switching are plugged into my network. For that, I thought to allow only one MAC address per port. I know this is possible in the A2, but I do not remember the command. Could someone help me? > > -- > Andrey Tavares > Núcleo de Tecnologia da Informação (NTi) - UNIVASF > > > * --To unsubscribe from enterasys, send email to [email protected] with the body: unsubscribe enterasys [email protected] > > Classification: UNCLASSIFIED > Caveats: FOUO > > > > --- > To unsubscribe from enterasys, send email to [email protected] with the body: unsubscribe enterasys [email protected] --- END OF DIGEST --- To unsubscribe from enterasys, send email to [email protected] with the body: unsubscribe enterasys [email protected] --- To unsubscribe from enterasys, send email to [email protected] with the body: unsubscribe enterasys [email protected]
