![background image](http://html.mh-extra.com/html/smc-networks/6624fmst/6624fmst_management-manual_1300650157.webp)
7-17
Using Passwords, Port Security, and Authorized IP Managers To Protect Against Unauthorized Access
Configuring and Monitoring Port Security
Usi
n
g P
a
sswo
rds,
P
o
rt
S
ecu
ri
ty
, an
d A
u
th
or
iz
ed
I
P
With the above configuration for port 1, the following command adds the
0c0090-456456 MAC address as the second authorized address.
SMC6624M(config)# port-security 1 mac-address 0c0090-
456456
After executing the above command, the security configuration for port 1
would be:
(The message
Inconsistent value
appears if the new MAC address
exceeds the current Address Limit or specifies a device that is already on the
list. Note that if you change a port from static to continuous learn mode, the
port retains in memory any authorized addresses it had while in static mode.
If you subsequently attempt to convert the port back to static mode with the
same authorized address(es), the
Inconsistent value
message appears
because the port already has the address(es) in its “Authorized” list.)
If you are adding a device (MAC address) to a port on which the Authorized
Addresses list is already full (as controlled by the port’s current Address Limit
setting), then you must increase the Address Limit in order to add the device,
even if you want to replace one device with another. Using the CLI, you can
SMC6624M(config)# show port-security 1
Port Security
Port : 1
Learn Mode : Static
Address Limit : 2
Action : None
Authorized Addresses
--------------------
0c0090-123456
The Address Limit has not
been reached.
Although the Address
Limit is set to 2, only
one device has been
authorized for this
port. In this case you
can add another
without having to also
increase the Address
Limit.
SMC6624M(config)# show port-security 1
Port Security
Port : 1
Learn Mode : Static
Address Limit : 2
Action : None
Authorized Addresses
--------------------
0c0090-123456
0c0090-456456
The Address Limit has been
reached.