Configure Alert/Trigger Action calling VB script to block rogue device

tyuasa

Hi,

Can you help me configure Alert Trigger Action to block a MAC or Shutdown a switch port when a new Rogue device is detected by using VB scripting and passing the MAC address variable?

I found the below Twack article and would like to do something similar but in my case block rogue devices.

https://thwack.solarwinds.com/docs/DOC-177839

Or please let me know if there is a more optimal way to accomplish this.

Your help is greatly appreciated!

Thank you.

mesverrum

Is there a good reason to build this using UDT and vbscripts (which are completely out of the modern fashion) when enterprise switches should already support enabling port security directly within their config?

Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide, 12.2(25)EW - Configuring Port Security [Cisco Cataly…

An important factor to keep in mind is that orion only collects the port info ever 30 minutes or so, which means your rogue device could have up to half an hour to abuse your network before orion even knows about it, UDT is a pretty low rent form of access control and I hate to see anyone think that it will do the job instead of the proper tool.