Repost: cat 3550 L3 Port security

From: Marko Berend (marko.berend@storm.hr)
Date: Fri Feb 13 2004 - 04:11:09 GMT-3


Help please,

Am I missing something so simple? Come on people, cat 3550, one Mac and one IP switchport restriction without using any ACLs (!?)
I'm guessing this rules out vlan access-maps for L3 also...

It's driving me mad :)

Thanks

-----Original Message-----
From: Marko Berend
Sent: 6. veljaha 2004 11:47
To: ccielab@groupstudy.com
Subject: cat 3550 L3 Port security

Hi group,

The task is to restrict access on a port to a single specified mac address and a single spec IP address without using L2/L3 acls. I understand the L2 part with port security, but is it possible for L3?

I tried specifying a static arp mapping on the cat3550 but this doesn't prevent this port talking to others in the L2 domain. Only when talking directly with the cat, this comes into play because the arp entry is static (when IP is different than in arp cache).

Any ideas?

Thanks,
Marko



This archive was generated by hypermail 2.1.4 : Fri Mar 05 2004 - 07:13:49 GMT-3