Enterasys Networks 2E253, 2H252, 2H253, 2H258 12.17 EXAMPLE 6, LOCKING A MAC ADDRESS TO A PORT USING CLASSIFICATION RULES, 12.17.1 Solving the Problem

Example 6, Locking a MAC Address to a Port Using Classification Rules
12-36 VLAN Operation and Network Applications
In this example, the AppleTalk traffic is routed only to Appl eTalk users (ports 1, 2, 5, and 6), while
IP traffic is allowed to be seen by IP users (ports 3, 4, and 7) and by IP/AppleTalk users (ports 1, 2,
5, and 6).
12.17 EXAMPLE 6, LOCKING A MAC ADDRESS TO A PORT USING
CLASSIFICATION RULES
The following example illustrates how to add security by “locking” an individual MAC address to
a port on the SmartSwitch device (S1). This would typically be done to ensure that only a
particular device can gain access to the network from a specific port. Traffic received by the switch
from any MAC address other than the one assigned to the “locked” port will be discarded.
In this example, illustrated in Figure 12-19, Switch S1 will be configured to lock ports 1 and 2 to
the source address 00.00.00.00.00.0A and 00.00.00.00.00.0B of Workstation 1 and 2, respectively.
Figure 12-19 Example 6, Locking Ports According to Classification Rule
12.17.1 Solving the Problem
Switch S1 needs to be configured with two 802.1Q VLANs. Since the switch, by default, already
has one VLAN created (the Default VLAN), only one new VLAN will need to be created. In this
example, the new VLAN will be named the Red VLAN.
30691_76
S1
Port 1
Port 2
Locked
Ports
Uplink to Network
00.00.00.00.00.0B
Workstation 2
00.00.00.00.00.0A
Workstation 1