We do in fact use IP Phones and run the PCs through the phone's PC port. That
setup isn't universal yet, but I would say it is true 75% of the time and
increasing, so I can't do a hard 1 MAC limit. Hence why MAB is active at all.
All switches are Cisco 2960 or 3560 models.
Respectfully,
Robert Rhoads
[email protected]<mailto:[email protected]>
From: [email protected] [mailto:[email protected]]
Sent: Thursday, July 02, 2015 9:52 AM
To: [email protected]
Subject: Re: [PacketFence-users] Rogue switches
Hi Robert,
Isn't your switch able to limit access to only one mac per port?
Or isn't that the solution you need? (Or do you use ip-phones and computers on
same port?)
Bye,
Holger
From: Rhoads, Robert W. [mailto:[email protected]]
Sent: Thursday, July 02, 2015 3:33 PM
To:
[email protected]<mailto:[email protected]>
Subject: [PacketFence-users] Rogue switches
PacketFence experts,
Is there a means or mechanism within PacketFence, when 802.1x/MAB is in
use, that will prevent an access port under PF control from allowing another
switch from working when connected to that port? I am aware I can use BPDU
Guard on access ports to stop a switch by killing the port if it is talking
Spanning-Tree, but I am more interested in stopping small, unmanaged switches
that don't talk Spanning-Tree that people have a tendency to plug in without
asking or getting permission. An earlier thread on this topic did not really
shed that much light for me... I appreciate any help and guidance.
Respectfully,
Robert Rhoads
[email protected]<mailto:[email protected]>
------------------------------------------------------------------------------
Don't Limit Your Business. Reach for the Cloud.
GigeNET's Cloud Solutions provide you with the tools and support that
you need to offload your IT needs and focus on growing your business.
Configured For All Businesses. Start Your Cloud Today.
https://www.gigenetcloud.com/
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
