Enterasys Networks 2E253, 2H253, 2H252, 2H258 manual 00.00.00.00.00.0A

Example 6, Locking a MAC Address to a Port Using Classification Rules

In this example, the AppleTalk traffic is routed only to AppleTalk users (ports 1, 2, 5, and 6), while IP traffic is allowed to be seen by IP users (ports 3, 4, and 7) and by IP/AppleTalk users (ports 1, 2, 5, and 6).

12.17EXAMPLE 6, LOCKING A MAC ADDRESS TO A PORT USING CLASSIFICATION RULES

The following example illustrates how to add security by “locking” an individual MAC address to a port on the SmartSwitch device (S1). This would typically be done to ensure that only a particular device can gain access to the network from a specific port. Traffic received by the switch from any MAC address other than the one assigned to the “locked” port will be discarded.

In this example, illustrated in Figure 12-19, Switch S1 will be configured to lock ports 1 and 2 to the source address 00.00.00.00.00.0A and 00.00.00.00.00.0B of Workstation 1 and 2, respectively.

Figure 12-19 Example 6, Locking Ports According to Classification Rule

Workstation 1

00.00.00.00.00.0A

Locked	Port 1
Ports	Port 2

Workstation 2

00.00.00.00.00.0B

S1

Uplink to Network

30691_76

12.17.1 Solving the Problem

Switch S1 needs to be configured with two 802.1Q VLANs. Since the switch, by default, already has one VLAN created (the Default VLAN), only one new VLAN will need to be created. In this example, the new VLAN will be named the Red VLAN.

12-36VLAN Operation and Network Applications