Cisco Catalyst 1300 - 802.1X Auth and limit Ports to 1 device?

[bm231]

Hi there,

i'm new to Cisco. We're configuring some Catalyst 1300-Switches and i'm trying to figure out, how i can limit ports to 1 device (MAC-Address). I'm using C1300-48T-4X with the actual firmware 4.1.6.54 in this case.

I've already successful setup a 802.1X-Radiusauthentication with dynamic VLAN (Microsoft NPS). When i try to configure Port Security on one Port, and set it to

I'm getting an error:

802.1x Port Control Mode prevents executing Lock port Dynamic Enable.

Is it not possible to use 802.1X and the dynamic lock?

We wan't to achive, that no user is able to connect a physical Switch to a port and connect further devices. Or, for example, that a VM in HyperV/VMware Workstation can be used in "bridge"-Mode to the local network.

Thanks in advance,

Bastian

[marce1000]

  - I presume this leads to a race condition w.r.t learning mac addresses and the 802.1x enforcement on the port (even when set to one only).   Can you use Classic Lock instead ?

  M.

[MHM Cisco World]

Can you elaborate more.

But let me notice you that 802.1x not work well with port-secuirty.

And for one deivce per port using 802.1x you need to use host mode single-host.

MHM