Cisco Catalyst 4500 Series, Software Configuration Manual

Page: 1487 / 2086

55-25
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 55 Configuring Port Security
Configuring Port Security on Voice Ports
Note To clear dynamically learned port security MAC addresses in the CAM table, use the
clear port-security dynamic command. The address keyword enables you to clear a secure MAC
addresses. The interface keyword enables you to clear all secure addresses on an interface (including
any port channel interface). The VLAN keyword allows you to clear port security MACs on a per-VLAN
per-port basis.
Note
Each port security-configured interface accepts one MAC-address by default. With port security port
level port-security configuration takes precedence over VLAN level port-security configuration. To
allow one MAC-address each for voice and data VLAN, configure the port for a maximum of greater
than or equal to two addresses.
Examples of Voice Port Security
The following examples are provided:
•
Example 1: Configuring Maximum MAC Addresses for Voice and Data VLANs, page 55-25
• Example 2: Configuring Sticky MAC Addresses for Voice and Data VLANs, page 55-26
Example 1: Configuring Maximum MAC Addresses for Voice and Data VLANs
This example shows how to designate a maximum of one MAC address for a voice VLAN (for a Cisco
IP Phone, let’s say) and one MAC address for the data VLAN (for a PC, let’s say) on Fast Ethernet
interface 5/1 and to verify the configuration:
Switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)# interface fa5/1
Switch(config-if)# switchport mode access
Switch(config-if)# switchport port-security
Switch(config-if)# switchport port-security maximum 2
Switch(config-if)# switchport port-security mac-address sticky
Switch(config-if)# switchport port-security maximum 1 vlan voice
Switch(config-if)# switchport port-security maximum 1 vlan access
Switch(config-if)# end
Note
Sending traffic to the ports causes the system to configure the port with sticky secure addresses.
Step 9
Switch(config-if)# end
Returns to privileged EXEC mode.
Step 10
Switch# show port-security address
interface interface_id
Switch#
show port-security address
Verifies your entries.
Command Purpose