To Next Page

To Previous Page

Configuring and Monitoring Port Security

MAC Lockdown

Figure 13-11. Connectivity Problems Using MAC Lockdown with Multiple Paths

M i x e d U s e r s

Internal

Network

External

Network

Switch 1

Server A

Server A is locked down

to Switch 1, Uplink 2

PROBLEM: If this link fails,

traffic to Server A will not use

the backup path via Switch 3

Switch 2

Switch 3

Switch 4

The resultant connectivity issues would prevent you from locking down

Server A to Switch 1. And when you remove the MAC Lockdown from Switch

1 (to prevent broadcast storms or other connectivity issues), you then open

the network to security problems. The use of MAC Lockdown as shown in the

above figure would defeat the purpose of using MSTP or having an alternate

path.

Technologies such as MSTP or “meshing” are primarily intended for an inter-

nal campus network environment in which all users are trusted. MSTP and

“meshing” do not work well with MAC Lockdown.

If you deploy MAC Lockdown as shown in the Model Topology in figure 13-10

(page 13-27), you should have no problems with either security or connectiv-

ity.

13-29

Other manuals for HP PROCURVE 2910AL

Questions and Answers:

Need help?

Do you have a question about the HP PROCURVE 2910AL and is the answer not in the manual?

General