MAC address

[glmrenard]

I don't think yjis is the good question but ... How can I block all MAC address not in the MAC address table on a cisco catalyst 3550

Thanks in advance,

Guillaume

 

[glmrenard]

Please help, it's really important. maybe i am not clear.
So:
I want my network run without restriction during 2 or 3 days and, once all MAC adress are known by the switch, I want no new mac address can connect, is itpossible ?

Thanks

Guillaume

 

[gdvissch]

the command "set port security 2/1 enable" does more or less what you want. It only allows the learned MAC address on the specified port. It doesn't take days to achieve this, after the first packet is sent and thus the switch learned the address it blocks all other addresses on that port.
The problem with this is that people with portables can not plug in somewhere else!

 

[glmrenard]

Thanks gdvissh,

I 'll try that !

best Regards,

Guillaume