1. Home
  2. Cisco Systems
  3. Port Security & SNMP traps

Port Security & SNMP traps

I'm wanting to set up Port Security to limit ethernet ports on cisco switches to a single mac-address. This is easy enough to do, however I know we have a lot of users with hubs on their desks and I'd rather gather info on these users first and issue warnings than just auto-disable their connections.

I was hoping Port Security would have a Violation Mode which just sends an SNMP trap but still allows traffic to be forwarded. Then after a warning, i can change the mode and start blocking ports with >1 mac.

I've been checking "show mac-address table" manually and looking for duplicate interface entries, but this is painfully slow & ultimately not very accurate. Has anybody any other ideas. This needs to be done on various different types of cisco switch (from 2900 to 6500), including some CatOs.

Any guidance much appreciated.

Reply to
mmm_danone
Loading thread data ...

Check the "cam notification" option. With this you can set ports to alert when a MAC address is learned on the port. This in turn can generate a SNMP message. While you'll certainly have to do some post-notification processing, it may give you what you're after.

Scott

Reply to
Scott Fringer

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.