Switch Port Hardening

Scenario

You are the on‑call security analyst for Cedar & Pine Outfitters, a regional outdoor retailer. During a quarterly access‑layer review you reach the Avenir AX‑2400 switch in the third‑floor wiring closet (IDF‑3). Inventory shows that most of its 24 access ports have nothing plugged in, and none of the live ports enforce port security. An auditor flagged the open jacks as a way for an unauthorized device to reach the internal VLAN. Your job is to harden the switch.

The asset record lists the live ports. Everything not in this list is unused:

Your tasks

1. Administratively disable every unused port so no one can patch into a dead jack.
2. On each live port, enable Port Lock and set Address learning = Static and Violation response = Drop. Live ports must stay enabled.
3. Answer the three review questions.

Tip: select several ports at once (a port range) and apply one configuration to all of them.