6. Port
Security
MN700004 Rev 01
46
Command Syntax
device-name
(config-if
UU/SS/PP
)#
port security
[
action
{
shutdown
|
trap
}|
max-
mac-count
<
number-of-addresses
>]
device-name
(config-if
UU/SS/PP
)#
no port security
[
action
{
shutdown
|
trap
}]
Argument Description
action shutdown
Disable the port when a security violation occurs.
action trap
Generate an SNMP trap when a security violation occurs. The MAC
address that will pass the maximum allowed will be learned as filtered.
max-mac-count
<number-of-addresses>
The maximum numbers of secure addresses that this port can support.
The range is <1 – 256>.
NOTES
1. In each port security command, the arguments are optional and mutually exclusive.
However, you can specify an action (shutdown or trap) in one port security command
and specify the maximum number of secure addresses (max-mac-count) in a second
port security command for the same port. Both settings will be effective.
2. By default, port security is disabled. When port security is enabled, the default action is
to generate an SNMP trap.
show port security
The
show port security
command, in Privileged (Enable) mode, displays the security status
of the specified port, as configured by the
port security
command described below. If the
argument is not specified, the security status of all ports configured with the command is
displayed.
A port can be either
secured
, meaning that only secured MAC-addresses can be attached to it,
or
not secured
.
Command Syntax
device-name#
show port security
[
UU/SS/PP
]
Argument Description
UU/SS/PP
Unit, Slot and Port numbers respectively of the secured port, each in one or two
decimal digits.
Examples
1. The following example configures various port security settings for ports 1/1/2, 1/1/3,
1/1/4 and 1/1/8:
device-name(config)#
interface 1/1/2
device-name(config-if 1/1/2)#
port security
device-name(config-if 1/1/2)#
interface 1/1/3
device-name(config-if 1/1/3)#
port security action shutdown
device-name(config-if 1/1/3)#
interface 1/1/4
device-name(config-if 1/1/4)#
port security max-mac-count 6
