Yes, but, if that's necessary, it's the administrative intervention required that I was saying wasn't necessarily a good thing.

However, it sounds like what Jay is talking about is different from what I was thinking and his choice may be feasible. I'm still not necessarily convinced it gains us much vs. running a fast STP on the IX, but, since there's apparently desire not to run any fast STP on the IX, this seems like a reasonable alternative.

Owen

On Dec 26, 2011, at 6:13 PM, Frank Bulk wrote:

> Couldn't that port be configured to allow all MACs in advance of the cut, and then tightened down again afterwards?
>
> Frank
>
> -----Original Message-----
> From: MICE Discuss [mailto:[log in to unmask]] On Behalf Of Owen DeLong
> Sent: Thursday, December 22, 2011 8:24 PM
> To: [log in to unmask]
> Subject: Re: [MICE-DISCUSS] New Switch Proposal
>
> What is the perceived benefit of doing this? The down-side is that whenever anyone has to replace a line card or do an equipment swap, they need to coordinate with someone who can update the port security on the switch. Worse, they need to remember that's an issue at the time or figure it out through a (not terribly convenient) troubleshooting process.
>
> Owen
>
>
> Sent from my iPad
>
> On Dec 23, 2011, at 4:23 AM, Jay Hanke <[log in to unmask]> wrote:
>
>> I have purchased a new EX 2200 switch for the Mankato Networks rack.
>> The new switch will be dedicated and will enable traffic stats for
>> those connected to my switch.
>>
>> As a trial, I plan to enable port security on the downstream access
>> ports limiting the port to one learned mac-address. The port security
>> mechanism is the same on the EX 2200 as the EX 4200 so if successful,
>> a similar strategy could be applied to the main switch.
>>
>> The uplink to the main switch will remain the same.
>>
>> Pending feedback, I'm planning to perform the move sometime in early January.
>>
>> Thanks,
>>
>> Jay
>>
>> ########################################################################
>>
>> To unsubscribe from the MICE-DISCUSS list, click the following link:
>> http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1
>
> ########################################################################
>
> To unsubscribe from the MICE-DISCUSS list, click the following link:
> http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1
>
> ########################################################################
>
> To unsubscribe from the MICE-DISCUSS list, click the following link:
> http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

########################################################################

To unsubscribe from the MICE-DISCUSS list, click the following link:
http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1