47-9
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Chapter 47 Configuring Port Security
Configuring Port Security
Configuring the Maximum Number of Secure MAC Addresses on a Port
To configure the maximum number of secure MAC addresses on a port, perform this task:
When configuring the maximum number of secure MAC addresses on a port, note the following
information:
•
With Release 12.2(18)SXE and later releases, the range for
number_of_addresses
is 1 to 4,097.
•
With releases earlier than Release 12.2(18)SXE, the range for
number_of_addresses
is 1 to 1,024.
•
With Release 12.2(18)SXE and later releases, port security supports trunks.
–
On a trunk, you can configure the maximum number of secure MAC addresses both on the trunk
and for all the VLANs on the trunk.
–
You can configure the maximum number of secure MAC addresses on a single VLAN or a range
of VLANs.
–
For a range of VLANs, enter a dash-separated pair of VLAN numbers.
–
You can enter a comma-separated list of VLAN numbers and dash-separated pairs of VLAN
numbers.
This example shows how to configure a maximum of 64 secure MAC addresses on Fast Ethernet
port 5/12:
Router#
configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#
interface fastethernet 3/12
Router(config-if)#
switchport port-security maximum 64
Router(config-if)#
do show port-security interface fastethernet 5/12
| include Maximum
Maximum MAC Addresses : 64
Command
Purpose
Step 1
Router(config)#
interface
type
1
slot/port
1.
type
=
ethernet
,
fastethernet
,
gigabitethernet
, or
tengigabitethernet
Selects the LAN port to configure.
Step 2
Router(config-if)#
switchport port-security
maximum
number_of_addresses
vlan
{
vlan_ID
|
vlan_range
}
Sets the maximum number of secure MAC addresses for
the port (default is 1).
Note
Per-VLAN configuration is supported only on
trunks.
Router(config-if)#
no switchport port-security
maximum
Reverts to the default configuration.
Step 3
Router(config-if)#
do show port-security
interface
type
1
slot/port
| include Maximum
Verifies the configuration.
