Cisco Catalyst 1900 Series, Brochure

Page: 286 / 411

———— —————————— —————————— —————————— —————————— ————————
3/3 0 0 0 0 0
Port Single−Col Multi−Coll Late−Coll Excess−Col Carri−Sen Runts Giants
———— —————————— —————————— ———————— —————————— ———————— ———— ——————
3/3 0 0 0 0 0 0 0
Last−Time−Cleared
——————————————————————————
Fri Dec 22 2000, 19:53:38
To enable static port security for module 1 port 3, manually specify the secure MAC address of the attached
interface 00−15−20−4c−78−a1 using the following command:
CAT5K> (enable) set port security 3/1 enable 00−15−20−4c−78−a1
Port 3/1 port security enabled with 00−15−20−4c−78−a1
as the secure mac address
CAT5K> (enable)
On a Cisco IOS command−based switch, you can use the port secure interface configuration command to
enable addressing security. In Interface Configuration mode, to assign a port to allow only one MAC address,
use the following command:
2924XL(config−if)# port secure max−mac−count 1
Tip You can assign max−mac−count a value between 1 and 132.
Displaying the MAC Address Table
Use the show mac−address−table command from Privileged EXEC Mode to display the MAC address table.
Here is the command and syntax placement—Table 13.5 contains a description of each syntax element:
Table 13.5: The show mac−address−table command’s optional syntax descriptions.
Syntax Description
static Displays the static addresses
dynamic Displays the dynamic addresses
secure Displays the secure addresses
self Displays addresses added by the switch itself
aging−time Displays aging−time for dynamic addresses for all VLANs
count Displays a count for different kinds of MAC addresses
address Displays information for a specific MAC address
hw−addr Displays information for the given MAC address
interface Displays addresses for the specific port
atm Adds dynamic addresses to an ATM module slot/port
slot Associates the dynamic address with a slot (1 or 2) port
port Adds dynamic addresses to a port (the port number is always 0 for ATM
interfaces)
vlan Displays addresses for a specified VLAN
vlan−id Displays addresses for the VLAN
show mac−address−table [static|dynamic|secure|self|
aging−time|count]
[address hw−addr] [interface interface] [atm slot/port][vlan vlan−id]
The output from the show mac−address−table command should look like the following:
270