A
UTHENTICATION
C
OMMANDS
4-103
Command Usage
• If you enable port security, the switch stops learning new MAC
addresses on the specified port when it has reached a configured
maximum number. Only incoming traffic with source addresses
already stored in the dynamic or static address table will be accepted.
• First use the
port security max-mac-count
command to set the
number of addresses, and then use the
port security
command to
enable security on the port.
• Use the
no port security max-mac-count
command to disable port
security and reset the maximum number of addresses to the default.
• You can also manually add secure addresses with the
mac-address-table static
command.
• A secure port has the following restrictions:
- Cannot use port monitoring.
- Cannot be a multi-VLAN port.
- Cannot be connected to a network interconnection device.
- Cannot be a trunk port.
• If a port is disabled due to a security violation, it must be manually
re-enabled using the
no
shutdown
command.
Example
The following example enables port security for port 5, and sets the
response to a security violation to issue a trap message:
Related Commands
shutdown (4-149)
mac-address-table static (4-176)
show mac-address-table (4-178)
Console(config)#interface ethernet 1/5
Console(config-if)#port security action trap
Содержание 6128L2
Страница 2: ......
Страница 21: ...CONTENTS xvii Glossary Index ...
Страница 22: ...CONTENTS xviii ...
Страница 26: ...TABLES xxii ...
Страница 40: ...INTRODUCTION 1 10 ...
Страница 54: ...INITIAL CONFIGURATION 2 14 ...
Страница 193: ...PORT CONFIGURATION 3 139 Figure 3 61 Displaying Etherlike and RMON Statistics ...
Страница 257: ...QUALITY OF SERVICE 3 203 Figure 3 90 Configuring Policy Maps ...
Страница 313: ...COMMAND GROUPS 4 13 PE Privileged Exec VC VLAN Database Configuration ...
Страница 592: ...TROUBLESHOOTING B 4 ...
Страница 605: ......