Cisco Catalyst 2960 Series, Configuration Manual

Page: 1569 / 2288

How to Configure Port Security
Enabling and Configuring Port Security
Before You Begin
This task restricts input to an interface by limiting and identifying MAC addresses of the stations allowed to
access the port:
SUMMARY STEPS
1. enable
2. configure terminal
3.
port-security mac-address forbidden mac address
4. interface interface-id
5.
switchport mode { access | trunk }
6.
switchport voice vlan vlan-id
7. switchport port-security
8.
switchport port-security [maximum value [ vlan { vlan-list | { access | voice }}]]
9. switchport port-security violation { protect | restrict | shutdown | shutdown vlan }
10. switchport port-security [mac-address mac-address [ vlan { vlan-id | { access | voice }}]
11.
switchport port-security mac-address sticky
12. switchport port-security mac-address sticky [ mac-address | vlan { vlan-id | { access | voice }}]
13. switchport port-security mac-address forbidden mac address
14.
end
15. show port-security
16.
show running-config
17. copy running-config startup-config
DETAILED STEPS
Purpose Command or Action
Enables privileged EXEC mode. Enter your password if prompted.
enable
Step 1
Example:
Switch> enable
Enters the global configuration mode. configure terminal
Example:
Switch# configure terminal
Step 2
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1487
How to Configure Port Security