The best method would be to isolate those devices on a single vlan and use port 
security for everything on that vlan.

Mack

-----Original Message-----
From: [email protected] 
[mailto:[email protected]] On Behalf Of Mike
Sent: Saturday, July 07, 2012 11:47 AM
To: 'Cisco-nsp'
Subject: [c-nsp] port security / prevent learning mac address

Hello,

        Is there a cisco feature that will learn a mac address on a port, and 
then refuse to learn that mac address from any other source? I have a small 
number of some critical network devices that I'd like to make sure cannot have 
their mac addresses spoofed or usurped due to loops or other network causes. 
How would this work? I have a 3560 with ipbase software.

Mike-

_______________________________________________
cisco-nsp mailing list  [email protected] 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to