2960 Switch Port Security

[santosh-khargotre]

Hi Every One.

we are using 2960 cisco switch asn we are trying to configure port security.

we are able to configure MAC base port security, but unbale to configure IP base port security.

can any one guide us can do IP base port security like MAC port security.

if not which switch will support IP and Mac base port security.

need help.

Thanks

[andrew.prince]

Explain "IP base port security" - what do you want to do?

[Jan Hrnko · Accepted solution]

Hi,

You can implement IP security on switch by using ACLs (access lists). If that's what you are looking for - I don't know what are you trying to achieve.

http://www.cisco.com/en/US/docs/switches/lan/catalyst2960/software/release/12.2_55_se/configuration/guide/swacl.html

Best regards,

Jan

[pestebogdan · Accepted solution]

Hi,

I think what you're looking for is IP Source Guard .

http://www.cisco.com/en/US/docs/switches/lan/catalyst2960/software/release/12.2_53_se/configuration/guide/swdhcp82.html#wp1335312

You can restrict based on the IP DHCP Snooping database and/or static "ip source binding.." entries.

Cheers.

[Manouchehr]

What do you mean by IP base port security???

you mean Access control list? denying specific source to specific destination?

Manouchehr

[santosh-khargotre]

Dear All.

I am Looking for the Switch port secutiy based on IP, like when users change static IP Address the switch port should either disable or go in to error disable mode, like port security work with MAC base port security.

[Nandan Mathure · Accepted solution]

DHCP Snooping with IP source guard should help. If you have static IPs then you can create static mappings.

Check the below documentation for clear reference:

http://www.cisco.com/en/US/docs/switches/lan/catalyst2960/software/release/12.2_53_se/configuration/guide/swdhcp82.html

Nandan Mathure