Authentication between Uplink-Ports - HPE Comware 5130<->Aruba 2930F

[BlackGreen]

Hi.

Actually we have configured MAC based authentication for the client ports an all access switches are closed behind a door.

Now we have one little 8 port new 2930F switch without a possibility to lock the switch behind a door.

So i would like to configure the uplink between the HPE Comware and the new Aruba to secure against "man in the middle" or someone take a notebook and connect himself directly on the uplink ports and have access to the management vlan.

Is it possible to configure an authentification like this for the uplink port of both switches?

Both uplink ports have three vlans. I name it vlan7, vlan8 and vlan9.

- The little aruba has a management ip on vlan7.
- Port 1 is linked to comware port GE2/0/48, both ports have vlan7, vlan8, vlan9
- Port 2 has a connected WiFi AP, also vlan7 for wifi management and vlan8 and 9 for network access of wifi clients (radius for vlan)
- Port 3-8 are client ports with mac based authentication to vlan8/9.

So i need a config to secure the port 1+2 against someone attach himself with a cable to this both ports.

[drk787]

@BlackGreen Hi, You may try any of the port security options like MAC lockdown, Port security features. Reference guides are given below.

Port Security: https://techhub.hpe.com/eginfolib/networking/docs/switches/WB/15-18/5998-8152_wb_2920_asg/content/ch14s02.html

MAC Lockdown:  https://techhub.hpe.com/eginfolib/networking/docs/switches/WB/15-18/5998-8152_wb_2920_asg/content/ch14s03.html 

Aruba 2930 Access security guide: https://techhub.hpe.com/eginfolib/Aruba/16.09/5200-5903/index.html?textToSearch=port-security#s_Precedence_of_Port_based_security_options.html