Trying to set MAC address port security to a switch Dell PowerConnect

Question

This is a question I sent to DELL. Maybe someone here can chime in becuase for some reason I dont think they are going to be of much help.

I am trying to confure MAC address security on this powerconnect 6248 and I have some questions.

What I am trying to do is set the switch to only allow traffic from existing mac addresses through a port.

I have locked a particual port that has a dynamically learned MAC address. The documentation says that when you lock a port, the dynamic address becomes a static address. I also have the max learned address to 1. The Action on Violation is set to Discard.

However if i plug a different device into the port, it stil allows traffic on that port from the new MAC address.

Is this normal? How can I get this thing to do what I want.

Please can someone help...

aelbaz · Answer

Hi:

I have the same problem. When I locked a particular port that has a dinamically learned MAC address, this addrees not become a static address.

Do you resolve the problem? Could you help me?

Thanks!

HMarch · Answer

For the sake of fellow googlers:

In order to lock down the port to specific MAC addresses, you have to set the max learned addresses to 0
and assign the addresses to the port and VLAN in the static address table.

So for MAC XXXX.YYYY.ZZZZ et al in VLAN 1 on port 1/g1:

interface vlan 1
bridge address XXXX.YYYY.ZZZZ ethernet 1/g1 permanent

exit

interface ethernet 1/g1
port security discard
port security max 0
exit

Networking General

Trying to set MAC address port security to a switch Dell PowerConnect

Was this post helpful?