Implementing Cisco Networking Solutions

Port security and MAC limiting

Any user can connect to the access port if the port is enabled. It is a good practice to keep the ports in a shutdown state and enable them only when a user is provisioned or connected to the network. After a user has connected, an attack can also happen by connecting a hub or an additional switch or by connecting multiple devices to the single switch port. This can be contained by looking at the MAC addresses.

Every decide that connects to the network has a MAC address. Configuring port security restricts a port's ingress traffic by limiting the MAC addresses that are allowed to send traffic into the port. The default number of secure MAC addresses for a port is one, but this can be changed through configuration ...