Need to secure a GS110TP switch

Hi ramram,

You are almost got success. We should change the " COS" ,and "EtherType key".

When you create Source MAC Address Rules Table, change "cos" and "EtherType Key" to blank by default they are 1 and ipv4. And config result is like this pic

Best Regards

Carl

Hi ramram,

Tips: It best for us to delete the previous created acls,and create again with above method.

Thanks

Carl

I give up 

Did all you said to the letter, assigned all ports to the ACL, and the switch became unreachable!!

Isnt this supposed to be a bit easier?!

@ramram,

Kindly access this article and use it as your reference guide in setting up MAC ACL.  

Also, if you want to try to configure Port Security based on MAC Address, here are the steps:

1. On the web-GUI of the GS110TP switch, go to Switching > Address Table > Advanced > Static MAC Address.

2. Add a static MAC address entry.

         a. Select the VLAN ID corresponding to the MAC address to add.

         b. Specify the MAC address to add.

         c. Specify the port associated with the MAC address.

         d. Click Add.

Note:  From steps 1-2, refer to pages 3-56 to 3-57 of the GS110TP user manual here.

3. On the web-GUI of the GS110TP switch, go to Security > Traffic Control, and then click the Port Security > Port Security Configuration.

4. Select Enable on Port Security Mode then click Apply.

5. On the web-GUI of the GS110TP switch, go to Security > Traffic Control, and then click the Port Security > Interface Configuration.

6. Specify the following settings:

       a. Port Security. Enable or Disable the port security feature for the selected port. •

       b. Max Allowed Dynamically Learned MAC. Sets the maximum number of dynamically learned MAC addresses on the selected interface. Valid range is 0–600.

       c. Max Allowed Statically Locked MAC. Sets the maximum number of statically locked MAC addresses on the selected interface. Valid range is 0–20.

       d. Enable Violation Traps. Enables or disables the sending of new violation traps designating when a packet with a disallowed MAC address is received on a locked port.

7. Click Apply. 

Note: From steps 3-7, refer to pages 5-37 to 5-40 of the GS110TP user manual here.

Let me share this forum link here since its similar to your goal. 

Hope it helps. 

Regards,

DaneA

NETGEAR Community Team

yes i managed. the problem is that i was allocating all ports where in reality you should always like a vacant port for the uplink

thanks for your help

@ramram,

Thanks for the update.  I'm glad the problem is now resolved. :)  

Since your concern has been resolved, I encourage you to mark the appropriate reply as the “Accepted Solution” so others can be confident in benefiting from the solution. The NETGEAR Community looks forward to hearing from you and being a helpful resource in the future!

Cheers,

DaneA

NETGEAR Community Team