I am not sure of what this does.
i do want to prevent any users from plugging in a switch on the access ports. Will this disable the port if they unplug their ethernet cable from their pc and plug in a switch to the access port?
Nope, you want bpdu guard to shut down the port if a bdbu is detected. "spanning-tree bpduguard enable"
This may not work if the users get a low end switch, as most of them don't run spanning tree.
Scott
a very secure solution for that would be 802.1x, but its not easy to set up. another quite simple is port-security. just allow only 1 mac-address at a port. so the people can=B4t work with a switch or hub on the port.
tony schrieb:
Why dont you use Mac address filetring for port security. Its a bit hectic but can be done
CK
bt snipped-for-privacy@gmx.de wrote:
Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.