ISE - Securing witch port channel interfaces

[BigK]

Hello,

On my switch, I have all the switchports configured with ISE- 802.X. My question is how can I secure the interfaces that belongs to a channel-group ? Someone can easily unplug the port and plug in any device, and since there is not security on the port that may allow the device to connect to the network.  

Example:

SW-C3850#

interface GigabitEthernet1/0/48
switchport access vlan 10
switchport mode access
channel-group 1 mode on
spanning-tree portfast
ip dhcp snooping trust
end

SW-C3850#

interface GigabitEthernet2/0/48
switchport access vlan 10
switchport mode access
channel-group 1 mode on
spanning-tree portfast
ip dhcp snooping trust
end

Thanks !!!

[balaji.bandi]

In terms of Security - we need to understand as below :

1. Physical Security

2. Network Security

3. Layer Security ---so on

If the Physical security breached - no one can help - it is a disaster - intruder can do anything.

coming back to your question - This port is part of Port-channel - so what will happen when the end-user device connected? 

[BigK]

@balaji.bandi 

That is the question - what will happen when the end-user device is connected to one of these ports? 

Thanks!