https://mattdrew.net/tags/security/ Recent content in Security on mattdrew.net - Matt's network blog Hugo en-US Wed, 03 Sep 2014 00:00:00 +0000 https://mattdrew.net/posts/port-sec/ Wed, 03 Sep 2014 00:00:00 +0000 https://mattdrew.net/posts/port-sec/ <p>Objective: Prevent users in sensitive environment from using switches or hubs to connect more than 2 devices to their switchport.</p> <p>In this example we will implement port-security and limit learned MACs on each switchport to a maximum of 2. To prevent administrative work by the network team, we will implement &lsquo;inactivity aging&rsquo;. In port-security, &lsquo;inactivity aging&rsquo; is a setting that will clear the sticky MAC after a period of time if there is no activity from that MAC address. This allows users to connect and be mobile within the office while still protecting the port and limiting numbers of devices. Here I choose to keep the port in restrict mode to prevent the port from being put in err-disable. I also want to receive log messages while limiting additional device activity.</p>