Got an issue with a department and a third party vendor. They add in a tp-link dumb switch and then mix my companies devices with another companies and connect to our switch. I don't want to mix the networked device so I have to manually go and remove it and connect the devices to their respective environments. Remotely, I'm excluding the foreign devices up from our DHCP server, but the current lease is under 4 hours. So even after shutting the port clearing the foreign mac and IP, then unshutting the port - the foreign devices are still pingable/on my network. I've tried putting on port-security and specified the allowed mac addresses, but as soon as they connect the wrong device, it will shut down traffic to the entire port, right? Is it possible to stop traffic to the select mac addresses? An organizational step to introduce dot1x is in play. But with over 1000 switches and like 20k end points - this isn't an immediate fix. (End of year roll out) Any suggestions on how I can remotely remove the unwanted devices but keep my devices connected?
