Can mac spoofing override port-security?

[capgemini-network]

Hello,

I have 100 buildings, with different /24 subnets, i.e. example - 10.74.1.0/24 - 10.74.100.0/24 and all under same VRF. But its a critical service such as home CCTV, therefore I don't want one apartment to see other and talk to any other. I have port security in access switches but mac spoofing can override the port-security and cause threat.

Please suggest solutions to make every apartment secure.

Regards,

August

[nspasov]

Hi there. There are a several ways you can secure and segment a campus network. Here are a few that come to mind:

- Utilize private VLANs (PVLANs):

- Deploy a NAC solution such as Cisco's Identity Services Engine and utilize 802.1 and  Anomalous Behaviour Detection

- VRF Lite

I hope this helps!

Thank you for rating helpful posts!