Многие знают о существовании port-security в коммутаторах cisco, но, пожалуй, редко кто сталкивался с реальной необходимостью ее применения в локальной сети. Даже если на коммутаторе нет таких фич, как dhcp snooping, ip source guard - это не повод сбрасывать port-security со счетов. Был в далекой-далекой галактике старый коммутатор Cisco 2950, куда в один из портов включалось всего два хоста через простой switch. Для них был создан отдельный vlan. Как-то они перестали работать. С маршрутизатора, на котором они терминировались, не пинговались.
Вот настройки порта и список mac-адресов, прилетевших в порт:
То есть, вместо трех адресов имеем 404. Причем генерированных случайным образом. На коммутаторе была возможность разрешить средствами port-security только определенные адреса, а так же ограничить их количество. Из arp-таблицы роутера были взяты "правильные" mac-адреса хостов.
Конечно, проблема в пределах неуправляемого коммутатора, куда эти хосты были подключены - осталась.
Можно считать данное сообщение рекламой управляемых коммутаторов.
Вот настройки порта и список mac-адресов, прилетевших в порт:
interface FastEthernet0/1
switchport access vlan 102
switchport mode access
no ip address
end
switch#show mac-address-table vlan 102
Mac Address Table
------------------------------------------
Vlan Mac Address Type Ports
---- ----------- ---- -----
102 001d.70e9.b156 DYNAMIC Fa0/12
102 0077.8376.c872 DYNAMIC Fa0/1
102 0677.7b7d.7803 DYNAMIC Fa0/1
102 083e.1797.1852 DYNAMIC Fa0/1
102 083e.1797.6757 DYNAMIC Fa0/1
102 083e.1797.6858 DYNAMIC Fa0/1
102 083e.1797.7858 DYNAMIC Fa0/1
102 083e.17a7.1652 DYNAMIC Fa0/1
102 083e.17a7.6658 DYNAMIC Fa0/1
102 083e.17a7.7658 DYNAMIC Fa0/1
102 083e.17a7.7752 DYNAMIC Fa0/1
102 083e.17a7.7777 DYNAMIC Fa0/1
102 083e.17b7.6858 DYNAMIC Fa0/1
102 083e.7777.6858 DYNAMIC Fa0/1
102 083e.7797.1852 DYNAMIC Fa0/1
102 083e.77b7.6857 DYNAMIC Fa0/1
102 083e.7ba7.7658 DYNAMIC Fa0/1
102 0a64.d727.7b7c DYNAMIC Fa0/1
102 0a67.d727.7b7c DYNAMIC Fa0/1
102 0a74.d727.7b7c DYNAMIC Fa0/1
102 0a77.8376.c872 DYNAMIC Fa0/1
102 0a77.d727.7b7c DYNAMIC Fa0/1
102 0c7b.8c9b.7d72 DYNAMIC Fa0/1
102 1618.1777.7771 DYNAMIC Fa0/1
102 1817.1450.d762 DYNAMIC Fa0/1
102 1817.1470.2ea1 DYNAMIC Fa0/1
102 1817.1470.4705 DYNAMIC Fa0/1
102 1817.1470.4767 DYNAMIC Fa0/1
102 1817.1470.4e61 DYNAMIC Fa0/1
102 1817.1470.4e64 DYNAMIC Fa0/1
102 1817.1470.4e71 DYNAMIC Fa0/1
102 1817.1470.4e81 DYNAMIC Fa0/1
102 1817.1470.4e8b DYNAMIC Fa0/1
102 1817.1470.5e67 DYNAMIC Fa0/1
102 1817.1470.5e77 DYNAMIC Fa0/1
102 1817.1470.770d DYNAMIC Fa0/1
102 1817.1470.7c67 DYNAMIC Fa0/1
102 1817.1470.7e61 DYNAMIC Fa0/1
102 1817.1470.7e71 DYNAMIC Fa0/1
102 1817.1470.8e67 DYNAMIC Fa0/1
102 1817.1470.8e6f DYNAMIC Fa0/1
102 1817.1470.cf67 DYNAMIC Fa0/1
102 1817.1470.df62 DYNAMIC Fa0/1
102 1817.1470.fc64 DYNAMIC Fa0/1
102 1817.1470.fc67 DYNAMIC Fa0/1
102 1817.1477.4771 DYNAMIC Fa0/1
102 1817.1477.4e71 DYNAMIC Fa0/1
102 1817.1477.5e67 DYNAMIC Fa0/1
102 1817.1477.7e71 DYNAMIC Fa0/1
102 1817.147f.7c67 DYNAMIC Fa0/1
102 1817.147f.fc62 DYNAMIC Fa0/1
102 1817.147f.fc67 DYNAMIC Fa0/1
102 1817.1480.4e8b DYNAMIC Fa0/1
102 1817.14a0.5e77 DYNAMIC Fa0/1
102 1817.54a6.7e71 DYNAMIC Fa0/1
102 1817.7477.7e71 DYNAMIC Fa0/1
102 1817.7570.7e71 DYNAMIC Fa0/1
102 1817.d5a6.7e71 DYNAMIC Fa0/1
102 1817.d776.5777 DYNAMIC Fa0/1
102 1817.d7a6.7771 DYNAMIC Fa0/1
102 1817.d7a6.7777 DYNAMIC Fa0/1
102 1817.d7a6.7e71 DYNAMIC Fa0/1
102 1871.7777.7470 DYNAMIC Fa0/1
102 1877.1c72.0677 DYNAMIC Fa0/1
102 1877.7777.7470 DYNAMIC Fa0/1
102 2415.762c.eb7d DYNAMIC Fa0/1
102 2415.762c.ed7d DYNAMIC Fa0/1
102 2415.767c.eb7d DYNAMIC Fa0/1
102 2415.772c.eb7d DYNAMIC Fa0/1
102 2415.f62c.eb7d DYNAMIC Fa0/1
102 2471.772c.eb7d DYNAMIC Fa0/1
102 2474.772c.eb7d DYNAMIC Fa0/1
102 24e7.7777.7777 DYNAMIC Fa0/1
102 2c77.777a.e778 DYNAMIC Fa0/1
102 2ee7.177c.4a77 DYNAMIC Fa0/1
102 2ef7.5470.7ed7 DYNAMIC Fa0/1
102 367c.7b75.a777 DYNAMIC Fa0/1
102 3809.e77e.7775 DYNAMIC Fa0/1
102 380e.e0a8.127f DYNAMIC Fa0/1
102 422f.7977.7377 DYNAMIC Fa0/1
102 4818.1877.d0c7 DYNAMIC Fa0/1
102 4818.777a.b0c7 DYNAMIC Fa0/1
102 4878.1477.b0c7 DYNAMIC Fa0/1
102 4878.7473.b0c7 DYNAMIC Fa0/1
102 4878.74a3.b0c7 DYNAMIC Fa0/1
102 5277.f977.7777 DYNAMIC Fa0/1
102 5657.4477.7ae7 DYNAMIC Fa0/1
102 5a08.7777.5476 DYNAMIC Fa0/1
102 5a57.4447.7ae7 DYNAMIC Fa0/1
102 5a57.4477.7ae7 DYNAMIC Fa0/1
102 5a69.7777.5476 DYNAMIC Fa0/1
102 5a7e.7778.5476 DYNAMIC Fa0/1
102 607e.7782.3777 DYNAMIC Fa0/1
102 6477.7736.03e6 DYNAMIC Fa0/1
102 6887.8b8c.3707 DYNAMIC Fa0/1
102 7077.2376.c872 DYNAMIC Fa0/1
102 7077.2776.c872 DYNAMIC Fa0/1
102 7077.6787.77a7 DYNAMIC Fa0/1
102 7077.74b7.4707 DYNAMIC Fa0/1
102 7077.7782.3777 DYNAMIC Fa0/1
102 7077.77db.3d63 DYNAMIC Fa0/1
102 7077.7cb7.4707 DYNAMIC Fa0/1
102 7077.8376.c872 DYNAMIC Fa0/1
102 7078.7e75.a777 DYNAMIC Fa0/1
102 7079.77b7.4707 DYNAMIC Fa0/1
102 707a.74b7.4707 DYNAMIC Fa0/1
102 707f.6d28.e27e DYNAMIC Fa0/1
102 70a7.74b7.4707 DYNAMIC Fa0/1
102 70a9.74b7.4707 DYNAMIC Fa0/1
102 70b9.77b7.4707 DYNAMIC Fa0/1
102 7277.7797.77b6 DYNAMIC Fa0/1
102 7287.b977.74f6 DYNAMIC Fa0/1
102 728c.b977.74f6 DYNAMIC Fa0/1
102 7439.7736.03e6 DYNAMIC Fa0/1
102 7447.07f7.d786 DYNAMIC Fa0/1
102 7470.7277.e778 DYNAMIC Fa0/1
102 7474.7746.6873 DYNAMIC Fa0/1
102 7476.7277.e778 DYNAMIC Fa0/1
102 7477.777a.e778 DYNAMIC Fa0/1
102 74a0.7f74.2777 DYNAMIC Fa0/1
102 7637.7777.7777 DYNAMIC Fa0/1
102 7647.7807.70b7 DYNAMIC Fa0/1
102 7674.7746.6873 DYNAMIC Fa0/1
102 7677.1b74.7760 DYNAMIC Fa0/1
102 7678.a27e.77ed DYNAMIC Fa0/1
102 76f7.2f07.fc57 DYNAMIC Fa0/1
102 76f7.8e07.fc57 DYNAMIC Fa0/1
102 7815.7877.ad77 DYNAMIC Fa0/1
102 7817.1472.06f7 DYNAMIC Fa0/1
102 781b.7477.6087 DYNAMIC Fa0/1
102 7828.e977.829e DYNAMIC Fa0/1
102 7858.1777.7da3 DYNAMIC Fa0/1
102 7858.7157.76a3 DYNAMIC Fa0/1
102 7858.7557.76a3 DYNAMIC Fa0/1
102 7858.7737.7aa3 DYNAMIC Fa0/1
102 7858.7757.75a3 DYNAMIC Fa0/1
102 7858.7757.76a3 DYNAMIC Fa0/1
102 7858.7757.77a3 DYNAMIC Fa0/1
102 7858.7777.77a3 DYNAMIC Fa0/1
102 7858.7777.7da3 DYNAMIC Fa0/1
102 7858.7797.76a3 DYNAMIC Fa0/1
102 7867.27f4.57fa DYNAMIC Fa0/1
102 7870.5777.6a77 DYNAMIC Fa0/1
102 7873.4707.7783 DYNAMIC Fa0/1
102 7873.802e.f754 DYNAMIC Fa0/1
102 7874.7746.6873 DYNAMIC Fa0/1
102 7875.4777.ad77 DYNAMIC Fa0/1
102 7875.7777.ad77 DYNAMIC Fa0/1
102 7875.7877.ad77 DYNAMIC Fa0/1
102 7877.2ad7.7b75 DYNAMIC Fa0/1
102 7877.74b7.4707 DYNAMIC Fa0/1
102 7877.7773.b0c7 DYNAMIC Fa0/1
102 7877.77a3.b0c7 DYNAMIC Fa0/1
102 7877.7a77.3775 DYNAMIC Fa0/1
102 7877.9777.6a77 DYNAMIC Fa0/1
102 7878.9777.6a77 DYNAMIC Fa0/1
102 787a.74b7.4707 DYNAMIC Fa0/1
102 787c.74b7.4707 DYNAMIC Fa0/1
102 7887.7710.c727 DYNAMIC Fa0/1
102 7887.7710.c737 DYNAMIC Fa0/1
102 7887.7710.c7b7 DYNAMIC Fa0/1
102 78a2.7e77.ed73 DYNAMIC Fa0/1
102 78a3.7658.7397 DYNAMIC Fa0/1
102 78b7.7cb7.4707 DYNAMIC Fa0/1
102 78c3.7710.c737 DYNAMIC Fa0/1
102 78c7.7710.c727 DYNAMIC Fa0/1
102 78c7.7710.c7d7 DYNAMIC Fa0/1
102 78c7.7d78.c7ba DYNAMIC Fa0/1
102 78c7.aad7.2772 DYNAMIC Fa0/1
102 78c7.aad7.3797 DYNAMIC Fa0/1
102 78c7.aad7.7772 DYNAMIC Fa0/1
102 78c7.ba72.3778 DYNAMIC Fa0/1
102 78c7.ba72.3797 DYNAMIC Fa0/1
102 78c7.ba78.3797 DYNAMIC Fa0/1
102 78c7.bad7.2756 DYNAMIC Fa0/1
102 78c7.bad7.27ea DYNAMIC Fa0/1
102 78c7.bad7.3750 DYNAMIC Fa0/1
102 78c7.bad7.3757 DYNAMIC Fa0/1
102 78c7.bad7.3777 DYNAMIC Fa0/1
102 78c7.bad7.3778 DYNAMIC Fa0/1
102 78c7.bad7.3790 DYNAMIC Fa0/1
102 78c7.bad7.3797 DYNAMIC Fa0/1
102 78c7.bad7.37c1 DYNAMIC Fa0/1
102 78c7.bad7.37c4 DYNAMIC Fa0/1
102 78c7.bad7.37e7 DYNAMIC Fa0/1
102 78c7.bad7.7772 DYNAMIC Fa0/1
102 78c7.bcd3.7772 DYNAMIC Fa0/1
102 78c7.bcd7.3778 DYNAMIC Fa0/1
102 78d3.300f.fc57 DYNAMIC Fa0/1
102 78d3.7777.c728 DYNAMIC Fa0/1
102 78d8.7977.877b DYNAMIC Fa0/1
102 78df.7277.829e DYNAMIC Fa0/1
102 78e8.1777.78d8 DYNAMIC Fa0/1
102 7a57.d213.c872 DYNAMIC Fa0/1
102 7a64.d727.7b7c DYNAMIC Fa0/1
102 7a74.d727.7b7c DYNAMIC Fa0/1
102 7a77.2376.c872 DYNAMIC Fa0/1
102 7a77.2776.c872 DYNAMIC Fa0/1
102 7a77.7270.c872 DYNAMIC Fa0/1
102 7a77.7276.c872 DYNAMIC Fa0/1
102 7a77.7870.c872 DYNAMIC Fa0/1
102 7a77.7d77.7777 DYNAMIC Fa0/1
102 7a77.8376.c872 DYNAMIC Fa0/1
102 7a77.8771.4101 DYNAMIC Fa0/1
102 7a77.d283.c872 DYNAMIC Fa0/1
102 7a77.d727.7b7c DYNAMIC Fa0/1
102 7a78.2171.4101 DYNAMIC Fa0/1
102 7a78.7777.4101 DYNAMIC Fa0/1
102 7a78.8771.4101 DYNAMIC Fa0/1
102 7a78.8777.4101 DYNAMIC Fa0/1
102 7a7b.8376.c872 DYNAMIC Fa0/1
102 7a7c.d727.7b7c DYNAMIC Fa0/1
102 7ab8.0777.4101 DYNAMIC Fa0/1
102 7ad7.8734.777b DYNAMIC Fa0/1
102 7c0a.7797.7707 DYNAMIC Fa0/1
102 7c17.627a.e778 DYNAMIC Fa0/1
102 7c17.687a.e778 DYNAMIC Fa0/1
102 7c17.727a.e778 DYNAMIC Fa0/1
102 7c27.9977.6a77 DYNAMIC Fa0/1
102 7c47.07f7.d786 DYNAMIC Fa0/1
102 7c4a.7777.7775 DYNAMIC Fa0/1
102 7c77.2376.c872 DYNAMIC Fa0/1
102 7c77.2776.c872 DYNAMIC Fa0/1
102 7c77.7276.c872 DYNAMIC Fa0/1
102 7c77.7777.6a77 DYNAMIC Fa0/1
102 7c77.8376.c872 DYNAMIC Fa0/1
102 7c77.9777.6a77 DYNAMIC Fa0/1
102 7c77.a67a.e778 DYNAMIC Fa0/1
102 7c77.b7a3.c872 DYNAMIC Fa0/1
102 7c7a.7277.00f7 DYNAMIC Fa0/1
102 7c7a.7727.705b DYNAMIC Fa0/1
102 7c7a.7727.7077 DYNAMIC Fa0/1
102 7c7a.7727.8052 DYNAMIC Fa0/1
102 7c7a.7727.805b DYNAMIC Fa0/1
102 7c7a.7727.807b DYNAMIC Fa0/1
102 7c7a.7727.e077 DYNAMIC Fa0/1
102 7c7a.7774.8052 DYNAMIC Fa0/1
102 7c7a.7777.8052 DYNAMIC Fa0/1
102 7c7a.7777.805b DYNAMIC Fa0/1
102 7c7a.7777.e0f7 DYNAMIC Fa0/1
102 7c7a.c727.8052 DYNAMIC Fa0/1
102 7c7a.c774.2077 DYNAMIC Fa0/1
102 7c7a.c774.7058 DYNAMIC Fa0/1
102 7c7a.c774.7077 DYNAMIC Fa0/1
102 7c7a.c774.70b7 DYNAMIC Fa0/1
102 7c7a.c774.7658 DYNAMIC Fa0/1
102 7c7a.c774.7677 DYNAMIC Fa0/1
102 7c7a.c774.7678 DYNAMIC Fa0/1
102 7c7a.c774.76b7 DYNAMIC Fa0/1
102 7c7a.c774.7a58 DYNAMIC Fa0/1
102 7c7a.c774.7a77 DYNAMIC Fa0/1
102 7c7a.c774.8052 DYNAMIC Fa0/1
102 7c7a.c774.8652 DYNAMIC Fa0/1
102 7c7a.c777.8052 DYNAMIC Fa0/1
102 7c7a.c778.2057 DYNAMIC Fa0/1
102 7c7a.c778.2077 DYNAMIC Fa0/1
102 7c7a.c778.7077 DYNAMIC Fa0/1
102 7c7a.c778.8052 DYNAMIC Fa0/1
102 7c7a.c778.805b DYNAMIC Fa0/1
102 7c7a.c778.8a52 DYNAMIC Fa0/1
102 7c7a.c784.7058 DYNAMIC Fa0/1
102 7c7a.c788.8052 DYNAMIC Fa0/1
102 7c87.9777.6a77 DYNAMIC Fa0/1
102 7c8a.7777.7775 DYNAMIC Fa0/1
102 7ca8.8777.4101 DYNAMIC Fa0/1
102 7cb7.59e7.1618 DYNAMIC Fa0/1
102 7cb8.8777.4101 DYNAMIC Fa0/1
102 7cda.7777.776b DYNAMIC Fa0/1
102 7cea.7727.807b DYNAMIC Fa0/1
102 7cea.7727.e077 DYNAMIC Fa0/1
102 7e0a.7797.7707 DYNAMIC Fa0/1
102 7e67.7d78.8777 DYNAMIC Fa0/1
102 7e74.77f7.c7b7 DYNAMIC Fa0/1
102 7e77.758f.74c6 DYNAMIC Fa0/1
102 7e77.7777.d739 DYNAMIC Fa0/1
102 7e77.7777.d779 DYNAMIC Fa0/1
102 7e83.7710.c727 DYNAMIC Fa0/1
102 7e87.7710.c727 DYNAMIC Fa0/1
102 7e87.7710.c737 DYNAMIC Fa0/1
102 7ea7.777d.4843 DYNAMIC Fa0/1
102 7ea7.777d.4873 DYNAMIC Fa0/1
102 7ea7.777d.48db DYNAMIC Fa0/1
102 7ea7.777d.5877 DYNAMIC Fa0/1
102 7eb7.c477.76d2 DYNAMIC Fa0/1
102 8420.f7d7.858e DYNAMIC Fa0/1
102 844f.07f7.d786 DYNAMIC Fa0/1
102 8827.7777.5077 DYNAMIC Fa0/1
102 8c37.07e8.724f DYNAMIC Fa0/1
102 8c9b.7d72.7777 DYNAMIC Fa0/1
102 8e27.7777.5077 DYNAMIC Fa0/1
102 907f.8c2a.e777 DYNAMIC Fa0/1
102 9c77.777a.e778 DYNAMIC Fa0/1
102 9c77.a67a.e778 DYNAMIC Fa0/1
102 a07f.7427.7776 DYNAMIC Fa0/1
102 a677.8a97.7777 DYNAMIC Fa0/1
102 aa77.7736.03e6 DYNAMIC Fa0/1
102 ae07.e779.8772 DYNAMIC Fa0/1
102 b8c7.76a9.1652 DYNAMIC Fa0/1
102 b8c7.76a9.7658 DYNAMIC Fa0/1
102 b8c7.77a9.1652 DYNAMIC Fa0/1
102 b8c7.77a9.7658 DYNAMIC Fa0/1
102 c817.77c0.7777 DYNAMIC Fa0/1
102 ce17.77c0.7777 DYNAMIC Fa0/1
102 d27e.a717.7bd4 DYNAMIC Fa0/1
102 d477.707e.370c DYNAMIC Fa0/1
102 d477.7827.76de DYNAMIC Fa0/1
102 d477.7827.77de DYNAMIC Fa0/1
102 d477.7f2c.77de DYNAMIC Fa0/1
102 d657.a94e.7777 DYNAMIC Fa0/1
102 d858.70a9.7752 DYNAMIC Fa0/1
102 d8c7.76a9.1652 DYNAMIC Fa0/1
102 d8c7.77a9.1652 DYNAMIC Fa0/1
102 da77.7777.6b3c DYNAMIC Fa0/1
102 da77.7777.6b7d DYNAMIC Fa0/1
102 e477.d687.7778 DYNAMIC Fa0/1
102 e817.77c0.7777 DYNAMIC Fa0/1
102 e857.7157.76a3 DYNAMIC Fa0/1
102 e857.7557.76a3 DYNAMIC Fa0/1
102 e857.7757.75a3 DYNAMIC Fa0/1
102 e857.7757.76a3 DYNAMIC Fa0/1
102 e857.7757.77a3 DYNAMIC Fa0/1
102 e857.7787.77a3 DYNAMIC Fa0/1
102 e857.7797.76a3 DYNAMIC Fa0/1
102 ec4a.7777.7775 DYNAMIC Fa0/1
102 ee17.77c0.7777 DYNAMIC Fa0/1
102 f437.7874.76de DYNAMIC Fa0/1
102 f477.77a3.b0c7 DYNAMIC Fa0/1
102 f477.77c3.b0c7 DYNAMIC Fa0/1
102 f478.71c3.b0c7 DYNAMIC Fa0/1
102 f478.74a3.b0c7 DYNAMIC Fa0/1
102 f478.77c3.b0c7 DYNAMIC Fa0/1
102 f4c7.77a3.b0c7 DYNAMIC Fa0/1
102 f817.77c0.7777 DYNAMIC Fa0/1
102 f838.1797.6858 DYNAMIC Fa0/1
102 f838.17b7.6857 DYNAMIC Fa0/1
102 f838.17b7.6858 DYNAMIC Fa0/1
102 f848.7779.1652 DYNAMIC Fa0/1
102 f848.7779.7658 DYNAMIC Fa0/1
102 f848.77a9.7752 DYNAMIC Fa0/1
102 f858.7079.7752 DYNAMIC Fa0/1
102 f858.70b9.6858 DYNAMIC Fa0/1
102 f858.7187.75a3 DYNAMIC Fa0/1
102 f858.7757.75a3 DYNAMIC Fa0/1
102 f858.7770.7d74 DYNAMIC Fa0/1
102 f858.7770.7d77 DYNAMIC Fa0/1
102 f858.7770.7d87 DYNAMIC Fa0/1
102 f858.7777.2277 DYNAMIC Fa0/1
102 f858.7777.22c7 DYNAMIC Fa0/1
102 f858.7777.7587 DYNAMIC Fa0/1
102 f858.7777.7d77 DYNAMIC Fa0/1
102 f858.7777.7d87 DYNAMIC Fa0/1
102 f858.7777.7da3 DYNAMIC Fa0/1
102 f858.7777.7dc7 DYNAMIC Fa0/1
102 f858.7777.8377 DYNAMIC Fa0/1
102 f858.7777.8977 DYNAMIC Fa0/1
102 f858.7777.89c7 DYNAMIC Fa0/1
102 f858.7777.8aa3 DYNAMIC Fa0/1
102 f858.7777.8d77 DYNAMIC Fa0/1
102 f858.7777.8d87 DYNAMIC Fa0/1
102 f858.7777.8dc7 DYNAMIC Fa0/1
102 f858.7777.ed74 DYNAMIC Fa0/1
102 f858.7777.ed77 DYNAMIC Fa0/1
102 f858.7787.75a3 DYNAMIC Fa0/1
102 f858.7787.77a3 DYNAMIC Fa0/1
102 f858.77b7.2274 DYNAMIC Fa0/1
102 f858.77b9.6858 DYNAMIC Fa0/1
102 f858.77d7.2274 DYNAMIC Fa0/1
102 f858.77d7.2277 DYNAMIC Fa0/1
102 f858.77f7.7aa3 DYNAMIC Fa0/1
102 f877.1777.b0c7 DYNAMIC Fa0/1
102 f877.1777.d0c7 DYNAMIC Fa0/1
102 f877.177f.b0c3 DYNAMIC Fa0/1
102 f877.177f.b0c7 DYNAMIC Fa0/1
102 f877.177f.d0c7 DYNAMIC Fa0/1
102 f877.17c7.b0c7 DYNAMIC Fa0/1
102 f877.7773.b0c7 DYNAMIC Fa0/1
102 f877.77a3.b0c7 DYNAMIC Fa0/1
102 f877.77c3.b0c7 DYNAMIC Fa0/1
102 f878.7173.b0c7 DYNAMIC Fa0/1
102 f878.71a3.b0c7 DYNAMIC Fa0/1
102 f878.71c3.b0c7 DYNAMIC Fa0/1
102 f878.74a3.b0c7 DYNAMIC Fa0/1
102 f878.74c3.b0c7 DYNAMIC Fa0/1
102 f878.77d7.2274 DYNAMIC Fa0/1
102 f888.7770.7d71 DYNAMIC Fa0/1
102 f888.7770.7d77 DYNAMIC Fa0/1
102 f888.77d7.2274 DYNAMIC Fa0/1
102 f8c7.7679.7752 DYNAMIC Fa0/1
102 f8c7.76a9.1652 DYNAMIC Fa0/1
102 f8c7.76a9.6657 DYNAMIC Fa0/1
102 f8c7.76a9.6658 DYNAMIC Fa0/1
102 f8c7.76a9.7658 DYNAMIC Fa0/1
102 f8c7.76b9.6857 DYNAMIC Fa0/1
102 f8c7.7779.1652 DYNAMIC Fa0/1
102 f8c7.7779.6657 DYNAMIC Fa0/1
102 f8c7.77a9.1652 DYNAMIC Fa0/1
102 f8c7.77a9.6657 DYNAMIC Fa0/1
102 f8c7.77a9.6658 DYNAMIC Fa0/1
102 f8c7.77b9.6858 DYNAMIC Fa0/1
102 f8d7.77d7.2274 DYNAMIC Fa0/1
102 fc57.e715.7777 DYNAMIC Fa0/1
102 fc77.2778.7808 DYNAMIC Fa0/1
102 fcd7.2778.7808 DYNAMIC Fa0/1
102 fe17.77c0.7777 DYNAMIC Fa0/1
Total Mac Addresses for this criterion: 404
То есть, вместо трех адресов имеем 404. Причем генерированных случайным образом. На коммутаторе была возможность разрешить средствами port-security только определенные адреса, а так же ограничить их количество. Из arp-таблицы роутера были взяты "правильные" mac-адреса хостов.
switch#show run int fa0/1
Building configuration...
Current configuration : 346 bytes
!
interface FastEthernet0/1
switchport access vlan 102
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security violation protect
switchport port-security mac-address 0026.1841.43e4
switchport port-security mac-address 0090.e804.36f7
no ip address
end
switch#show mac-address-table vlan 102
Mac Address Table
------------------------------------------
Vlan Mac Address Type Ports
---- ----------- ---- -----
102 001d.70e9.b156 DYNAMIC Fa0/12
102 0026.1841.43e4 STATIC Fa0/1
102 0090.e804.36f7 STATIC Fa0/1
Total Mac Addresses for this criterion: 3
Конечно, проблема в пределах неуправляемого коммутатора, куда эти хосты были подключены - осталась.
Можно считать данное сообщение рекламой управляемых коммутаторов.