Denying traffic for unknown routers/WAPS

Question

I support several SG200-26p Small Business switches.  As our networking has grown more complex, I'm now starting to venture beyond basic configurations.
With the 200 series switches, is it possible to deny service / turn off a port if an unknown WAP, Switch or additional router is detected on the SG200?
Thanks!

Answer 1

Hello [email protected],
Here is a link to the admin guide:  http://www.cisco.com/c/dam/en/us/td/docs/switches/lan/csbss/sf20x_sg20x/administration_guide/78-21139.pdf
On page 262 in the beginning of configuration of port security.
Here is some of the information you may be interested in:
Port Security has four modes:
• Classic Lock—All learned MAC addresses on the port are locked, and the
port does not learn any new MAC addresses. The learned addresses are
not subject to aging or re-learning.
• Limited Dynamic Lock—The device learns MAC addresses up to the
configured limit of allowed addresses. After the limit is reached, the device
does not learn additional addresses. In this mode, the addresses are
subject to aging and re-learning.
• Secure Permanent—Keeps the current dynamic MAC addresses
associated with the port and learns up to the maximum number of
addresses allowed on the port (set by Max No. of Addresses Allowed).
Relearning and aging are disabled. 
• Secure Delete on Reset—Deletes the current dynamic MAC addresses
associated with the port after reset. New MAC addresses can be learned
as Delete-On-Reset ones up to the maximum addresses allowed on the
port. Relearning and aging are disabled. 
Hope this helps,
Michael D.
If this post is helpful please rate or mark as correct.