Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

The method of prohibiting unauthorized devices such as mobile phones from connecting to the corporate wireless network

2025-01-31 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Network Security >

Share

Shulou(Shulou.com)06/01 Report--

To prevent users from privately changing the mobile phone mac to continue to access the network, we set on the switch port connected to the AP to allow only the specified MAC address to connect to the network.

Note:

1. Make sure that the port layer 2 mode that connects to AP on the switch is access mode.

two。 The number of MAC and port-security maximum allowed to pass must be the same.

3. Each time you increase MAC, first shutdown, then set the number of maximum, then increase MAC, and finally no shutdown activate the port

4. You must add the MAC address of AP itself, otherwise you cannot telnet to AP.

5. Configure on the port on the switch that connects to the AP

Configuration commands:

XIASW-B-005 (config) # interface fastEthernet 0Compact 35

XIASW-B-005 (config-if) # shutdown

XIASW-B-005 (config-if) # switchport port-security

XIASW-B-005 (config-if) # switchport port-security violation protect

XIASW-B-005 (config-if) # switchport port-security maximum 7

XIASW-B-005 (config-if) # switchport port-security mac-address 0023.0426.1a7e

XIASW-B-005 (config-if) # no shutdown

XIASW-B-005 (config-if) # exit

XIASW-B-005#wr

Verify:

XIASW-B-005#sh running-config interface fastEthernet 0/35

Building configuration...

Current configuration: 1781 bytes

!

Interface FastEthernet0/35

Switchport access vlan 5

Switchport mode access

Switchport port-security maximum 30

Switchport port-security

Switchport port-security violation protect

Switchport port-security mac-address 0008.9ff3.f336

Switchport port-security mac-address 0023.0426.1a7e

Switchport port-security mac-address 0023.4dd9.7205

Switchport port-security mac-address 0024.2b59.e67f

Switchport port-security mac-address 0024.2b5a.035c

Switchport port-security mac-address 0024.d794.7870

Switchport port-security mac-address 0027.1011.761c

Switchport port-security mac-address 0027.1011.d7dc

Switchport port-security mac-address 0027.1012.90e0

Switchport port-security mac-address 0027.10a3.0394

Switchport port-security mac-address 0811.96ac.e0d8

Switchport port-security mac-address 0c77.1a84.5a27

Switchport port-security mac-address 100b.a952.26c0

Switchport port-security mac-address 207d.7424.52cb

Switchport port-security mac-address 3ca9.f48f.aa8c

Switchport port-security mac-address 3ca9.f48f.fdec

Switchport port-security mac-address 3ca9.f4a1.e6c4

Switchport port-security mac-address 3cd0.f8ba.f414

Switchport port-security mac-address 6067.20e1.d798

Switchport port-security mac-address 6092.172b.db71

Switchport port-security mac-address 6c88.147d.a958

Switchport port-security mac-address 6c88.147d.dd30

Switchport port-security mac-address 6c88.147d.e53c

Switchport port-security mac-address 6c88.147d.ea5c

Switchport port-security mac-address 8c70.5a08.1364

Switchport port-security mac-address 8c70.5a08.23d4

Switchport port-security mac-address 9cb7.0df4.42b0

Switchport port-security mac-address acf7.f3ef.cf4a

Switchport port-security mac-address b4ce.f673.44c4

Switchport port-security mac-address c46a.b769.d3b9

End

XIASW-B-005#sh mac-address-table interface fastEthernet 0/35

Mac Address Table

Vlan Mac Address Type Ports

-

5 0008.9ff3.f336 STATIC Fa0/35

5 0023.0426.1a7e STATIC Fa0/35

5 0023.4dd9.7205 STATIC Fa0/35

5 0024.2b59.e67f STATIC Fa0/35

5 0024.2b5a.035c STATIC Fa0/35

5 0024.d794.7870 STATIC Fa0/35

5 0027.1011.761c STATIC Fa0/35

5 0027.1011.d7dc STATIC Fa0/35

5 0027.1012.90e0 STATIC Fa0/35

5 0027.10a3.0394 STATIC Fa0/35

5 0811.96ac.e0d8 STATIC Fa0/35

5 0c77.1a84.5a27 STATIC Fa0/35

5 100b.a952.26c0 STATIC Fa0/35

5 207d.7424.52cb STATIC Fa0/35

5 3ca9.f48f.aa8c STATIC Fa0/35

5 3ca9.f48f.fdec STATIC Fa0/35

5 3ca9.f4a1.e6c4 STATIC Fa0/35

5 3cd0.f8ba.f414 STATIC Fa0/35

5 6067.20e1.d798 STATIC Fa0/35

5 6092.172b.db71 STATIC Fa0/35

5 6c88.147d.a958 STATIC Fa0/35

5 6c88.147d.dd30 STATIC Fa0/35

5 6c88.147d.e53c STATIC Fa0/35

5 6c88.147d.ea5c STATIC Fa0/35

5 8c70.5a08.1364 STATIC Fa0/35

5 8c70.5a08.23d4 STATIC Fa0/35

5 9cb7.0df4.42b0 STATIC Fa0/35

5 acf7.f3ef.cf4a STATIC Fa0/35

5 b4ce.f673.44c4 STATIC Fa0/35

5 c46a.b769.d3b9 STATIC Fa0/35

Total Mac Addresses for this criterion: 30

XIASW-B-005#

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Network Security

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report