cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

detection host on LAN

Comes here often

detection host on LAN

How can I detect that a suspicious  host has been detached to a LAN network ? 

3 REPLIES 3
Kind of a big deal

Re: detection host on LAN

I'm not sure what kind of "suspicious" you mean. But here's a few points:

  • IDS/IPS and AMP events would be found in the Security & SD-WAN > Security Center
  • Rogue DHCP servers would be found in the Network-Wide > Event Log
  • Sticky MAC breaches would also be listed in the Network-Wide > Event Log
  • You can also set alerts to warn you if specific MAC-addresses connect to the network. You can do that in the Network-Wide > Alerts page.

Does any of these answer your question?

Comes here often

Re: detection host on LAN

How to detect that a foreign host has been connected to my network, and how to prevent him from gaining access?

Kind of a big deal

Re: detection host on LAN

Preferred way to do this would be to implement 802.1X access control:

https://documentation.meraki.com/MS/Access_Control/MS_Switch_Access_Policies_(802.1X)

Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.