Forum Discussion

Aspirant

Feb 08, 2017

Solved

Need to secure a GS110TP switch

Hi all We just got a GS110TP managed switch. We need it to recognize only a set of network devices and drop the rest. Trying to set MAC filtering but for some reason its not working and all devic...

Security

DaneA
Feb 26, 2017
@ramram,

I just want to follow-up on this. Were you able to access the article I've shared and used it as your reference guide? Also, were you able to try to configure Port Security on your GS110TP switch?

Regards,

DaneA

NETGEAR Community Team

JohnRo

NETGEAR Employee Retired

Feb 13, 2017

Hi ramram,

Were you able to talk to support regarding this one?

Thanks,

ramram

Aspirant

Feb 13, 2017

Yes still lost though...

What I need is this setup:

I WISH TO BE ABLE TO SET SWITCH TO 'RECOGNIZE' ONLY 2 COMPUTERS BY MAC. THESE 2 COMPUTERS SHOULD WORK ON ALL PORTS.
IF I CONNECT OTHER PCs THEY SHOUDNT WORK ON ALL PORTS.

Cant get it to work :(

Carl_z
NETGEAR Expert
Feb 14, 2017
Hi ramram,

Welcome to the Community!

I think it it possible for you to achieve the goal by mac acl. Try with following steps

1. Go to "ACL>ACL Wizard", select "ACl Based on Source MAC"

2. Add rules

    rule 1   Permit source mac **********/00:00:00:00:00:00 (input pc1's mac)

    rule 2   Permit source mac **********/00:00:00:00:00:00 (input pc2's mac)

    rule 3   Deny    Match Every

3. On binging Configuration slect all ports.

You can also refer to the pic

Hope it helps

Carl

Netgear Employee
- ramram
  Aspirant
  Feb 15, 2017
  Hi...I followed your instructions to the letter however ALL ports became unreachable when I mark them. I had to reset the switch and retry...
  
  When I tried it the 2nd time I left two ports unmarked and they kept working whilst the other six ports became unactive....
  
  What am I missing here?
  - Carl_z
    NETGEAR Expert
    Feb 16, 2017
    Hi ramram,
    
    You are almost got success. We should change the " COS" ,and "EtherType key".
    
    When you create Source MAC Address Rules Table, change "cos" and "EtherType Key" to blank by default they are 1 and ipv4. And config result is like this pic
    
    Best Regards
    
    Carl