Chapter 24: General Security Measures
Port Security
– 822 –
E
XAMPLE
This example shows the port security settings and number of secure
addresses for all ports.
Console#show port security
Global Port Security Parameters
Secure MAC Aging Mode : Disabled
Port Security Port Summary
Port Port Security Port Status Intrusion Action MaxMacCnt CurrMacCnt
--------------------------------------------------------------------------
Eth 1/ 1 Disabled Secure/Down None 0 2
Eth 1/ 2 Enabled Secure/Up None 10 0
Eth 1/ 3 Disabled Secure/Down None 0 0
Eth 1/ 4 Disabled Secure/Down None 0 0
Eth 1/ 5 Disabled Secure/Down None 0 0
.
.
.
The following example shows the port security settings and number of
secure addresses for a specific port. The Last Intrusion MAC and Last Time
Detected Intrusion MAC fields show information about the last detected
intrusion MAC address. These fields are not applicable if no intrusion has
been detected or port security is disabled. The MAC Filter ID field is
configured by the
network-access port-mac-filter
command. If this field
displays Disabled, then any unknown source MAC address can be learned
as a secure MAC address. If it displays a filter identifier, then only source
MAC address entries in MAC Filter table can be learned as secure MAC
addresses.
Console#show port security interface ethernet 1/2
Secure MAC Aging Mode : Disabled
Port Security Details
Port : 1/2
Port Security : Disabled
Port Status : Secure/Up
Intrusion Action : None
Max MAC Count : 0
Table 24-3: show port security - display description
Field
Description
Port Security
The configured status (enabled or disabled).
Port Status
The operational status:
•
Secure/Down – Port security is disabled.
•
Secure/Up – Port security is enabled.
•
Shutdown – Port is shut down due to a response to a port security
violation.
Intrusion Action The configured intrusion response.
MaxMacCnt
The maximum number of addresses which can be stored in the address
table for this interface (either dynamic or static).
CurrMacCnt
The current number of secure entries in the address table.
Summary of Contents for SSE-G2252
Page 42: ...44 General IP Routing on page 627...
Page 603: ...Chapter 16 IP Configuration Setting the Switch s IP Address IP Version 6 609...
Page 883: ...Chapter 24 General Security Measures Port based Traffic Segmentation 894...
Page 989: ...Chapter 30 Congestion Control Commands Automatic Traffic Control Commands 1000 Console...
Page 1007: ...Chapter 33 Address Table Commands 1019...
Page 1137: ...Chapter 38 Quality of Service Commands 1150...