Blocking Wireless Routers

[Alex Li]

Hello,

What is the easiest method to block wireless routers from entering my network ?

My situation is users are plugging in their own wireless routers at remote locations, can I use BPDU guard for such ? I simply want

to disable the port for X minutes.

Can this be done on the 3750X series ?

[Philip D'Ath]

You can use a Cisco Wireless Lan Controller (WLC) with some Cisco access points.  Get an extra access point and deploy it in rogue mode.

http://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/112045-handling-rogue-cuwn-00.html

If you have ports that a specifically only used by users, then try applying the desktop macro.

interface Gigabit0/1

  macro apply cisco-desktop

If you have Cisco phones then use:

interface Gigabit0/1

  macro apply cisco-phone

This applies the settings recommend by Cisco for each specific model of switch.  In particular it will enable port security which will limit the number of MAC addresses allowed on the port.