HP ProCurve 3500yl Series User Manual

Configuring and Monitoring Port Security
MAC Lockdown
M i x e d U s e r s
Internal
Network
External
Network
Switch 1
Server A
Server A is locked down
to Switch 1, Uplink 2
PROBLEM: If this link fails,
traffic to Server A will not use
the backup path via Switch 3
Switch 2
Switch 3
Switch 4
Figure 11-11.Connectivity Problems Using MAC Lockdown with Multiple Paths
The resultant connectivity issues would prevent you from locking down
Server A to Switch 1. And when you remove the MAC Lockdown from Switch
1 (to prevent broadcast storms or other connectivity issues), you then open
the network to security problems. The use of MAC Lockdown as shown in the
above figure would defeat the purpose of using MSTP or having an alternate
path.
Technologies such as MSTP or “meshing” are primarily intended for an inter-
nal campus network environment in which all users are trusted. MSTP and
“meshing” do not work well with MAC Lockdown.
If you deploy MAC Lockdown as shown in the Model Topology in figure 11-10
(page 11-28), you should have no problems with either security or connectiv-
ity.
11-30

HP ProCurve 3500yl Series Specifications

General

Model	HP ProCurve 3500yl Series
Switching Capacity	176 Gbps
Layer	Layer 3
Input Voltage	100-240 VAC
PoE	Available on some models
Management	Web, CLI, SNMP
Routing Protocol	RIP, OSPF, BGP
Remote Management Protocol	Telnet
Features	VLAN
Power Consumption Operational	Varies by model
Memory	256 MB
Power Supply	Internal
Security Features	802.1X, RADIUS, TACACS+
Ports	24 or 48 x 10/100/1000Base-T ports