Networks

Ask something
Discussion Locked

Sticky ports

0 helpful
3 replies

by kevaburg

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
For me the best solution is to use sticky MAC addresses on switch ports and not necessarily to use DHCP to control the access. A MAC address will be registered during the client systems start-up and if the MAC doesn't match what is in the MAC table the port will be closed down, requiring administrative intervention.

3 replies

by kevaburg

.....not using DHCP to restrict access. On most managed switches there is a switchport security function that will essentially "lock" a switchport to a MAC address. With unused ports being shut down there is very little chance (never say never!) of a rogue device coming onto the network. Unplugging a legal device and replacing it with one that is not allowed will cause the port to close down.

This discussion is closed to new replies.