How to set mac-filtering on HP switch 5412

[tyborowski]

Hi all,

My issue is:

I have some vlans: vlan1, vlan2, vlan3..... and i connect some 50 PC to vlan1 where i have dhcp in this LAN. How to create a mac-filtering whit this 50 mac-addresses. To disable some other unauthorized mac-adresses other then this fifty. To be sure that somebody don't bring his own device and put to this LAN.    

P.S. This thread has been moevd from Switches, Hubs, Modems (Legacy ITRC forum) to ProCurve / ProVision-Based - Hp Forum Moderator

[Vince-Whirlwind]

guess you have 3 choices:

1. implement 802.1x to authorise valid machines. As MAC addresses are easily spoofed, this is best.

2. implement MAC-address security on the ports - lock each switchport to a single MAC address and use MAC-learning to accept the first MAC it sees.

3. lock down your DHCP scope by reserving addresses to all the valid MAC addresses and only issuing IPs to them.

[tyborowski]

Can you show me example how to do it? Point 1 and 2 ?

[Vince-Whirlwind]

1.

Here is the old document:
http://h10032.www1.hp.com/ctg/Manual/c02642107.pdf

If you have a Microsoft NPS server, then you can use that, eg,

http://blogs.technet.com/b/scd-odtsp/archive/2013/05/14/microsoft-network-access-protection-simple-setup.aspx

2.

Check the Procurve manual under "port-security".