limit mac address table entries packet tracer

[murphyva]

for a school assignement we need to configure a network with multiple subnets in ospf and rip area's
everything works but 1 problem remains for one subnet

Subnet is build as followed:
I have a switch with 4 hosts.
2 hosts are in vlan 10 (fa0/10-11) , other 2 hosts are in vlan 20 fa0/12-13)
switch has a trunk connected to a router with subinterfaces (fa0/1)
setup works fine. 

one of the assignements is that no more than 3 mac addresses can be active on the switch at the same time.
I can only apply individual port security which would result in 5 possible entries .

i've tried looking into acl/mac acl and possible options where i could maybe group these ports
and apply a security to the group but can't find possible solutions that work in packet tracer.

Is there a way to limit the total amount a mac address entries on a switch in packet tracer?  

[Georg Pauwen]

Hello,

configure the trunk with:

switchport port-security maximum 3

[murphyva]

Wouldn't that still allow more than 3 entries on the swith itself ?

[Georg Pauwen]

Hello,

it would indeed, but only 3 MAC addresses at a time would be able to traverse the trunk. It is either that or what Luis suggest...I would check back with the instructor.

[luis_cordova]

Hi @murphyva 

I suspect that your instructor wanted to indicate the maximum MAC addresses allowed by interfaces, and not a maximum for the entire switch.

switch(config-if)# switchport port-security maximum <n°>

Could you share the instructions given by your instructor?

Regards

[murphyva]

The instructions are in dutch.
I've added the portion of the exercise where the instruction is listed.

The instruction in dutch
"Op switch S2-1 mogen slechts 3 verschillende MAC-adressen actief kunnen worden"

[luis_cordova]

Hi @murphyva 

Indeed, the instruction is not very clear.

As @Georg Pauwen  indicates, I would consult the instructor to verify.

Regards

[Georg Pauwen]

Hello,

I happen to live in The Netherlands...but still the instruction is unclear to me. You can, as stated, either limit the amount of MAC addresses on the ports to three, or on the trunk. I agree with Luis, get with your instructor. Reading the instructions, it looks like they have translated them from English, so they might have missed an important keyword...