Port Security Implementation

1.enable port security

Switch(config-if)#switchport port-security

2.Sets a maxmum number of MAC addresses that will be allowed on this port.(defualt is one)

Switch(config-if)#switchport port -security maximum 4

3.Specifies which MAC addresses will be allowed on this port (optional).

Switch(config-if)#switchport port-security mac-address x.x.x.x

4.Defines what action an interface will take if a nonallowed MAC address attempts access.

Switch(config-if)#switchport port-security violation {shutdown | restrict | protect }

==============

1. Protect: Frames from the nonallowed address are dropped, but there is no log of the
violation.
2. Restrict: Frames from the nonallowed address are dropped, a log message is created,
and a Simple Network Management Protocol (SNMP) trap is sent.
3. Shutdown: If any frames are seen from a nonallowed address, the interface is
errdisabled, a log entry is made, an SNMP trap is sent, and manual intervention or
errdisable recovery must be used to make the interface usable.