port security mac spoofing

[Nikola291]

hi
i use a switch sg300 series 28 p and i use port-security system for to filter mac address on interfaces.</p>
i have checked which i change mac address on device non authorized with mac address authorized , it can use LAN.
i have in the forum a solution is to configure more vlan or to use NAC technology.
There is another free solution for to resolve the problem?

[balaji.bandi]

you can check below URL, see if you can able to resolve or this requirement is good enough.

https://www.cisco.com/c/en/us/support/docs/smb/switches/cisco-small-business-300-series-managed-switches/smb4810-port-security-configuration-on-the-300-series-managed-switch.html

if you looking other solution possible, but what kind of network is yours, is worth the invest more money ?

[Nikola291]

thank you for the replay.

I have look the link but it is illustrate all step for enable port security. i know that procedure an its enable on my network now. i can up level security because port security is insufficient to mac spoofing.

The network is very large lan, there is 100 host and more print and scanner.

How i can be secure which never a host unauthorized is connect on lan?

I cannot use more VLAN because it is not sufficient solution vs mac spoofing.