35-7
Catalyst 6000 Family Software Configuration Guide—Releases 6.3 and 6.4
78-13315-02
Chapter 35 Configuring Port Security
Configuring Port Security
This example shows how to set the shutdown timeout to 600 minutes on port 7/7:
Console> (enable)
set port security 7/7 shutdown 600
Secure address shutdown time set to 600 minutes for port 7/7.
Console> (enable)
Disabling Port Security
To disable port security, perform this task in privileged mode:
This example shows how to disable security on a port:
Console> (enable)
set port security 2/1 disable
Port 2/1 port security disabled.
Console> (enable)
Console> (enable)
show port security 2/1
Port Security Violation Shutdown-Time Age-Time Max-Addr Trap IfIndex
----- -------- --------- ------------- -------- -------- -------- -------
3/24 disabled restrict 20 300 10 disabled 921
Port Num-Addr Secure-Src-Addr Age-Left Last-Src-Addr Shutdown/Time-Left
----- -------- ----------------- -------- ----------------- ------------------
3/24 1 00-e0-4f-ac-b4-00 - - - -
Console> (enable)
Restricting Traffic Based on a Host MAC Address
To restrict incoming or outgoing traffic for a specific MAC address, perform this task in privileged
mode:
This example shows how to create a filter that restricts traffic for a specific MAC address:
Console> (enable)
set cam static filter 00-02-03-04-05-06 1
Filter entry added to CAM table.
Console> (enable)
This example shows how to clear the filter:
Console> (enable)
clear cam 00-02-03-04-05-06 1
CAM entry cleared.
Console> (enable)
Task
Command
Step 1
Disable port security on the desired ports.
set port security
mod/port
disable
Step 2
Verify the configuration.
show port security
[
mod
/
port
]
Task
Command
Step 1
Restrict traffic destined to or originating from a
specific MAC address.
set cam static
|
permanent filter
unicast_mac
vlan
Step 2
Remove the filter.
clear cam
mac_address vlan
Step 3
Verify the configuration.
show cam static
