View original (French)

Setting up MAC filtering on HP 2530 switch in cascade

LomionBellum Posted messages 3 Status Member -  
 semper -
Hello,

So I want to set up MAC filtering by ports for more security on the switches in my company. For the model, they are HP 2530 J9776A.

Regarding the filtering itself, it is relatively simple to implement thanks to the Port Security option, my problem lies elsewhere, let me explain:

If I have to configure MAC filtering on each switch by compiling the addresses of more than 200 workstations distributed on several floors, not to mention new arrivals that will need to be integrated as well, this will take a lot of time and add a non-negligible workload.

I therefore wonder if there exists a tool that allows administering several HP 2530 switches cascaded and thus to be able to manage them all from a single console.

Thank you in advance for your responses and have a great day!

3 answers

  1.
    LomionBellum Posted messages 3 Status Member 1
     
    Thank you for your reply, but that's exactly the problem: the network is segmented into multiple VLANs, DHCP on the firewall, the idea is to homogenize the switches (they will all be the same) and add filtering for extra protection with direct port blocking if an unapproved workstation connects to it.
    What I’m looking for is truly a supervision software that allows from a single console to administer and implement filtering on all the switches at the same time. a newcomer in this room, I authorize them to connect on this outlet and not another, but if I have to take control of each switch on each floor etc... that’s going to be extra workload. For the moment I found this, I don’t know yet if it will work, I’m researching it https://www.fr.paessler.com/switch_monitoring
    Thanks for your reply anyway!
    1
    1. peperonie06 Posted messages 237 Status Member 21
       
      from a personal perspective, I prefer to apply MAC filtering on my DHCP server (I don’t like switch interfaces)
      the advantage is 1 IP = 1 MAC address, and for administration it’s much more practical

      then for monitoring it’s a different topic
      0
    2. LomionBellum Posted messages 3 Status Member 1
       
      Yes, I should look into the matter, after all it’s also a directive from my supervisor, and in the company I’m in safety is paramount at all levels (even if that’s probably the case in all large companies). So we’ll see, I’ll also check what you suggested, thanks again for your response and the advice :)
      0
    3. peperonie06 Posted messages 237 Status Member 21
       
      Redoing an entire infrastructure is a lot of work
      and securing an infrastructure is another ballgame where you have to be aware of vulnerabilities and new technologies

      after all it depends on the requirements and the usages ^^
      personally, MAC filtering is fine but I don't think it's essential for security

      if you want more info, don't hesitate to ask
      0
  2. semper
     
    Hello,
    maybe from this side
    https://www.hpe.com/fr/fr/product-catalog/networking/networking-software/pip.hp-intelligent-management-center-enterprise-software-platform.4176520.html

    Best regards
    0
  3. peperonie06 Posted messages 237 Status Member 21
     
    hi
    if you have a DHCP server, you can put your MAC filter on it (that can be an option and more practical)
    to cascade your switches, you can create a cluster
    with a master switch and the others that follow, so you don’t need to redo the same configs
    however if you have different models among the switches, the cluster won’t work
    if you start creating VLANs and making different configurations etc ...
    that could cause problems
    -1