Comware

 View Only
  • 1.  ip-lockdown on 5300xl

    Posted Oct 24, 2007 03:34 AM
    Hi,
    Is there somehow possible to do a ip-lockdown on a port on a 5300xl switch, like you can do on a 2600 switch?

    I need to only allow one specific ip-adress per port!

    /Marcus


  • 2.  RE: ip-lockdown on 5300xl

    Posted Oct 29, 2007 08:55 PM
    The best I can think of is using IDM to assign port-based RADIUS assigned ACL's. It's a lot of effort to go to though if a 2600 can already do exactly what you want.

    The 2600's just recently got the Dynamic IP Lockdown enhancement, hopefully the 5300xl will follow suit eventually.


  • 3.  RE: ip-lockdown on 5300xl

    Posted Oct 30, 2007 12:59 AM
    OSI Layer2: MAC lockdown -MAC ACLs- , or disable the port (harsh solution, but worx). If you have network mngmnt soft, you can do this easily.

    802.1x might help you.

    Cheers.
    Dan