topic Security in Network Security

Security

ismatullah — Fri, 21 Feb 2020 13:49:16 GMT

Dear All,
i have a question about Network i want to configure access layer switches (all port) with source(Host) dedicated IP address and Mac-address, for no one change and use other host ip, is it possible solution.

thanksss

Yes. It depends on your

Marvin Rhoads — Thu, 19 May 2016 02:39:22 GMT

Yes. It depends on your switch model and IOS version though.

You would use port security and IP source guard. (available even on layer 2 access switches if you have the right IOS version)

Dear Rohads,

ismatullah — Thu, 19 May 2016 03:42:24 GMT

Dear Rohads,

first of all thanks of your idea,
over access layer switches are 3560,2960 model and IOS version 12.4, but i want to configure IP source guard. is it possible configure without DHCP and DHCP Snooping, if yes send me full configuration on this email.: ismat_sh2000@yahoo.com

You're welcome.

Marvin Rhoads — Thu, 19 May 2016 04:13:25 GMT

You're welcome.

IP source guard requires either IP DHCP snooping or manual binding. The latter is very seldom used as it requires a lot of administrative overhead.

The configuration guide shows how to do it. See this location:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/configuration/guide/book/ipsrcgrd.html#wp1097327

CSC doesn't work by sending full configurations offline. This is a public forum and the intention is for all to be able to share in and learn from the questions/problems presented and answers provided.

Thanks a lot of your

ismatullah — Thu, 19 May 2016 04:55:07 GMT

Thanks a lot of your kindness