16-10
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2948G-GE-TX, and Catalyst 2980G Switches Software Configuration Guide—Release 8.2GLX
78-15908-01
Chapter 16 Configuring Port Security
Monitoring Port Security
This example shows how to disable security on a port:
Console> (enable) set port security 2/1 disable
Port 2/1 port security disabled.
Console> (enable) show port security 2/1
Port Security Violation Shutdown-Time Age-Time Max-Addr Trap IfIndex
----- -------- --------- ------------- -------- -------- -------- -------
3/24 disabled restrict 20 300 10 disabled 921
Port Num-Addr Secure-Src-Addr Age-Left Last-Src-Addr Shutdown/Time-Left
----- -------- ----------------- -------- ----------------- ------------------
3/24 1 00-e0-4f-ac-b4-00 - - - -
Console> (enable)
Restricting Traffic for a Host MAC Address
To restrict incoming or outgoing traffic for a specific MAC address, perform this task in privileged mode:
This example shows how to create a filter for a specific MAC address:
Console> (enable) set cam static filter 00-02-03-04-05-06 1
Filter entry added to CAM table.
Console> (enable)
This example shows how to clear the filter:
Console> (enable) clear cam 00-02-03-04-05-06 1
CAM entry cleared.
Console> (enable)
This example shows how to display the static CAM entries:
Console> show cam static
VLAN Dest MAC/Route Des [CoS] Destination Ports or VCs / [Protocol Type]
---- ------------------ ----- -------------------------------------------
3 04-04-05-06-07-08 * FILTER
Console> (enable)
Monitoring Port Security
You can view the following port security information:
•
List of secure MAC addresses for a port
•
Maximum number of secure addresses that are allowed on a port
Task
Command
Step 1
Restrict traffic that is destined to or originating
from a specific MAC address.
set cam {static | permanent} filter unicast_mac
vlan
Step 2
Clear the filter.
clear cam {static | permanent}
clear cam mac_address vlan
Step 3
Verify the configuration.
show cam mac_address vlan
show cam {static | permanent}