2960X host Mac address

[Wei Kwong Ong]

Hi Everyone!

Is Catalyst 2960X able to store an allowed MAC address table, when the host connected to the switch, whichever port, it can be authorized (allowed) or unauthorized (denied).

Thanks!

[johnlloyd_13]

hi,

yes, try to use the port security feature.

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15-0_2_EX/security/configuration_guide/b_sec_152ex_2960-x_cg/b_sec_152ex_2960-x_cg_chapter_010010.html#ID437

[Wei Kwong Ong]

Hi, If my understanding correct, it is for port-based right? This have to configure port-by-port?

[johnlloyd_13]

yes, you can configure a switch port to allow certain MAC address and shut it down if it exceeds the MAC address limit.

you can use the interface range command to make configuration easier.

[Wei Kwong Ong]

Is it possible to configure a mac address table in the switch for all the ports, when a host plug into the switch, it will learn and match the mac address in the table, then take the action allow or deny?

[johnlloyd_13 · Accepted solution]

hi,

i believe you're referring to static MAC address on a switch.

this is a bit tedious to implement than port security.

the link gives an example on a nexus switch but should also be applicable to 2960x (or any Cisco switch):

http://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5000/sw/configuration/guide/cli/CLIConfigurationGuide/MACAddress.pdf

[Wei Kwong Ong]

Yup, that is what I need.

Thanks johnlloyd_13  !