topic RE: Port Security on x450e in ExtremeSwitching (EXOS/Switch Engine)

Port Security on x450e

Andrew_Schulz1 — Tue, 12 Apr 2016 21:37:00 GMT

I have several x450e switches being used as access switches for phones, clients and a few Wifi APs. I would like to tighten security on these switches, I've done the standard RADIUS AAA, disabled telnet and http and only allow access by AD group via SSH, I log changes, I've turned off VLAN 1 and blackholed and disabled all unused ports. Now, I would like to take it to the next step and I was thinking about port security.

I would like to do something at the port level, however, I don't want a bunch of overhead to manage it. Also, my phones and clients are using DHCP so doing IP/MAC address per port is not possible, I don't think. So, what are my options??? Any suggestions?

RE: Port Security on x450e

Patrick_Voss — Tue, 12 Apr 2016 21:48:00 GMT

Hello Andrew,

You can use Netlogin:

https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-configure-802-1x-based-Netlogin-wit...
https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-configure-Mac-based-Netlogin-with-t...
https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-configure-Mac-based-Netlogin-with-R...

Here are a few articles that can help get you started.

RE: Port Security on x450e

Andrew_Schulz1 — Tue, 12 Apr 2016 22:29:00 GMT

Yeah, that will work. Thanks for the tip and kb links.