Home / server / Questions / 395100
Accepted
stefan.at.wpf
Asked: 2012-06-04 03:18:55 +0800 CST

Identify physical switch port a packet is coming from?

  • 772

Given a network structure like this:

client 1 \
.         \
.          switch -- firewall
.         / 
client n /

(in words: all clients connected to one switch and the switch connected to the firewall)

Is it possible (on the firewall) to identify the physical port on the switch that a client used?

Background: There's some simple MAC authentification for the clients, there can only be 1 person responsible for what happens an a switch port (because there is just one RJ45 connector per room and 1 person who owns the room). However, it would be possible to fake the MAC address, then I wouldn't know from which room the data is coming, however I need to know this for sure in case of abuses. Is this possible without vlans? Thanks for any hint!

networking security switch

1 Answers

  1. Best Answer

    You can know this by implementing port security on your switch. One requirement is that you have a managed switch. Only one MAC address will be allowed on each switch port.

    • 2