QTech QSW-2800 series, Руководство по настройке

Страница: 98 / 415

+7(495) 797-3311 www.qtech.ru
Москва, Новозаводская ул., 18, стр. 1
84
belongs to this interface in MAC address
table or a MAC address is configured to
several interfaces in same VLAN, both of
them will violate the security of the MAC
address.
switchport port-security aging {static | time
< value > | type {absolute | inactivity}}
no switchport port-security violation aging
{static | time | type}
Enable port-security aging entry of the
interface, specify aging time or aging type.
Admin mode
clear port-security {all | configured |
dynamic | sticky} [[address < mac-addr> |
interface < interface-id> ] [vlan < vlan-id> ]]
Clear the secure MAC entry of the interface.
show port-security [interface < interface-
id> ] [address | vlan]
Show port-security configuration.
12.3 Example of PORT SECURITY
Internet
HOST A
HOST B
SWITCH
Ethernet1/1
Typical topology chart for port security
When the interface enabled Port security function, configure the maximum number of the
secure MAC addresses allowed by a interface to be 10, the interface allows 10 users to
access the internet at most. If it exceeds the maximum number, the new user cannot access
the internet, so that it not only
limit the user’s number but also access the internet safely. If
configuring the maximum number of the secure MAC addresses as 1, only HOST A or HOST B
is able to access the internet.
Configuration process:
#Configure the switch.
Switch(config)#interface Ethernet 1/1
Switch(config-if- ethernet1/1)#switchport port-security