Hello Ludovic, thanks again. I think with this configuration my wifi clients would be blocked on this port. Unless my AP does NAT, which it doesn’t. I’m going to check my switch manual again. Maybe I’ll find something useful.
Kind regards Johannes Johannes Mudrich Mitarbeiter IT Altmark-Klinikum gGmbH Ernst-von-Bergmann-Straße 22 39638 Gardelegen Tel.: 03907 791229 Fax.: 03907 791248 Mail: j.mudr...@altmark-klinikum.de Von: Zammit, Ludovic [mailto:luza...@akamai.com] Gesendet: Dienstag, 21. März 2023 19:54 An: PacketFence-users <packetfence-users@lists.sourceforge.net> Cc: Mudrich, J. <j.mudr...@altmark-klinikum.de> Betreff: Re: [PacketFence-users] secure AP Uplink Ports Hello Johannes, We usually don’t do radius authentication on the Access Point since switch does not support well the trunk mode in radius. What you could do a is to pin the Mac address on the port and only that Mac address would be allowed to communicate. It’s port security violation. Thanks, Ludovic Zammit Product Support Engineer Principal Lead [https://www.akamai.com/us/en/multimedia/images/custom/2019/logo-no-tag-93x45.png] Cell: +1.613.670.8432 Akamai Technologies - Inverse 145 Broadway Cambridge, MA 02142 Connect with Us: [https://www.akamai.com/us/en/multimedia/images/custom/community.jpg]<https://community.akamai.com>[https://www.akamai.com/us/en/multimedia/images/custom/rss.png]<http://blogs.akamai.com>[https://www.akamai.com/us/en/multimedia/images/custom/twitter.png]<https://twitter.com/akamai>[https://www.akamai.com/us/en/multimedia/images/custom/fb.png]<http://www.facebook.com/AkamaiTechnologies>[https://www.akamai.com/us/en/multimedia/images/custom/in.png]<http://www.linkedin.com/company/akamai-technologies>[https://www.akamai.com/us/en/multimedia/images/custom/youtube.png]<http://www.youtube.com/user/akamaitechnologies?feature=results_main> On Mar 21, 2023, at 8:11 AM, Mudrich, J. via PacketFence-users <packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net>> wrote: Hello everyone, I have another question regarding port security: Is there any way I can secure a port on an edge switch where an access point is connected? I’m thinking of a scenario where someone takes a ladder, pulls the cable from an access point and connects his own device. Maybe some mechanism like: If port comes up without APs MAC, close the port. Thanks Johannes Johannes Mudrich Mitarbeiter IT Altmark-Klinikum gGmbH Ernst-von-Bergmann-Straße 22 39638 Gardelegen Tel.: 03907 791229 Fax.: 03907 791248 Mail: j.mudr...@altmark-klinikum.de<mailto:j.mudr...@altmark-klinikum.de> <sah.png><https://urldefense.com/v3/__https:/www.salusaltmarkholding.de/__;!!GjvTz_vk!T7v7AYu6SWKu-QPbBGxD3_3vOBNOkaoW63hC2w7vKIMW2wLbV-w9MQ1KYnY8egBEbNiVRaGhVwTY37BJv4-WLMRGUfZVEy215TcbDw$> Salus Altmark Holding gGmbH Tel.: +49 39325700<tel:+4939325700> Sitz der Gesellschaft: Seepark 5 | 39116 Magdeburg www.salusaltmarkholding.de<https://urldefense.com/v3/__https:/www.salusaltmarkholding.de__;!!GjvTz_vk!T7v7AYu6SWKu-QPbBGxD3_3vOBNOkaoW63hC2w7vKIMW2wLbV-w9MQ1KYnY8egBEbNiVRaGhVwTY37BJv4-WLMRGUfZVEy3g7PuBZg$> <instagram.png><https://urldefense.com/v3/__https:/www.instagram.com/salusaltmarkholding/__;!!GjvTz_vk!T7v7AYu6SWKu-QPbBGxD3_3vOBNOkaoW63hC2w7vKIMW2wLbV-w9MQ1KYnY8egBEbNiVRaGhVwTY37BJv4-WLMRGUfZVEy3I9gBAxg$> <facebook.png><https://urldefense.com/v3/__https:/www.facebook.com/SalusAltmarkHolding__;!!GjvTz_vk!T7v7AYu6SWKu-QPbBGxD3_3vOBNOkaoW63hC2w7vKIMW2wLbV-w9MQ1KYnY8egBEbNiVRaGhVwTY37BJv4-WLMRGUfZVEy2G1isdKw$> <linkedin.png><https://urldefense.com/v3/__https:/de.linkedin.com/company/salus-ggmbh__;!!GjvTz_vk!T7v7AYu6SWKu-QPbBGxD3_3vOBNOkaoW63hC2w7vKIMW2wLbV-w9MQ1KYnY8egBEbNiVRaGhVwTY37BJv4-WLMRGUfZVEy2HvLvycA$> <xing.png><https://urldefense.com/v3/__https:/www.xing.com/pages/salusaltmarkholdingggmbh__;!!GjvTz_vk!T7v7AYu6SWKu-QPbBGxD3_3vOBNOkaoW63hC2w7vKIMW2wLbV-w9MQ1KYnY8egBEbNiVRaGhVwTY37BJv4-WLMRGUfZVEy0PqTA4zw$> <youtube.png><https://urldefense.com/v3/__https:/www.youtube.com/user/SALUSgGmbH__;!!GjvTz_vk!T7v7AYu6SWKu-QPbBGxD3_3vOBNOkaoW63hC2w7vKIMW2wLbV-w9MQ1KYnY8egBEbNiVRaGhVwTY37BJv4-WLMRGUfZVEy1k53XHFg$> Registergericht: AG Stendal: HRB 112594 Geschäftsführer: Jürgen Richter Aufsichtsratsvorsitz: Wolfgang Beck Gemäß Art. 13 DSGVO informieren wir darüber, dass Ihre Daten elektronisch gespeichert werden. Nähere Informationen: www.salusaltmarkholding.de/datenschutz<https://urldefense.com/v3/__https:/www.salusaltmarkholding.de/datenschutz__;!!GjvTz_vk!T7v7AYu6SWKu-QPbBGxD3_3vOBNOkaoW63hC2w7vKIMW2wLbV-w9MQ1KYnY8egBEbNiVRaGhVwTY37BJv4-WLMRGUfZVEy2PmI-sTQ$> Ab Januar 2022 nehmen wir keine Mails mit doc-, xls- und ppt-Anhängen mehr an. Bitte verwenden Sie die aktuellen Office-Formate docx, xlsx, pptx oder pdf. _______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net<mailto:PacketFence-users@lists.sourceforge.net> https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!T7v7AYu6SWKu-QPbBGxD3_3vOBNOkaoW63hC2w7vKIMW2wLbV-w9MQ1KYnY8egBEbNiVRaGhVwTY37BJv4-WLMRGUfZVEy2YViEouQ$<https://urldefense.com/v3/__https:/lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!T7v7AYu6SWKu-QPbBGxD3_3vOBNOkaoW63hC2w7vKIMW2wLbV-w9MQ1KYnY8egBEbNiVRaGhVwTY37BJv4-WLMRGUfZVEy2YViEouQ$>
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
