topic Port-security MAC address range issue in Network Security

Port-security MAC address range issue

simonaloka7 — Wed, 19 Jul 2023 09:17:26 GMT

Hello community, i'm just a new CCNA R&S certified

When configuring port-security on an interface of a Cisco c2960 Series, i face a small issue because i wanted to insert 250 secure static mac addresses on port fa0/15 without rewrite the same command line "switchport port-security mac-address aaa.bbb.ccc". Therefore, does a command or feature like "mac-address range" or "mac-address list..." exist on c2960 switches ?

How can i do to simplify this task ?

Re: Port-security MAC address range issue

MHM Cisco World — Wed, 19 Jul 2023 09:34:30 GMT

you can use sticky port-security with max 250
this make port learn 250 mac address add it as static secure automatic.

Re: Port-security MAC address range issue

simonaloka7 — Wed, 19 Jul 2023 12:11:08 GMT

It is true, but if an unidentify machine (coming outside from the enterprise) plug onto that port, it will automatically accepted and secured in running configurations because the maximum (250 mac addresses) won't be reached yet. Where the necessity to insert statically all internal host mac addresses to avoid this kind of incident (except if i'm wrong). So how to acheive it easily.

Re: Port-security MAC address range issue

MHM Cisco World — Wed, 19 Jul 2023 12:20:24 GMT

sorry, the only way then is add manually one by one.

Re: Port-security MAC address range issue

simonaloka7 — Wed, 19 Jul 2023 13:27:01 GMT

In other hand, i think that Cisco can (if they want) add this feature to access switches, the possibility to add (statically) a list or range of secured mac address the command "switchport port-security mac-address list/range mac-address list/range" why not something like that when implementing port security. Or something like that exist on advanced category of switches...

Re: Port-security MAC address range issue

MHM Cisco World — Wed, 19 Jul 2023 13:31:08 GMT

There is something in my mind' I will check it tonight in my lab and update you.