Cisco 500 series Administration Manual page 319

Configuring Security
Configuring Port Security
NOTE
STEP 1
STEP 2
STEP 3
Cisco 500 Series Stackable Managed Switch Administration Guide
To use 802. 1 X on a port, it must be in multiple host or multi session modes. Port
security on a port cannot be set if the port is in single mode (see the 802. 1 x, Host
and Session Authentication page).
To configure port security:
Click Security > Port Security. The Port Security page is displayed. Port
Security Page
Select an interface to be modified, and click Edit. The Edit Port Security Interface
Settings page is displayed.
Enter the parameters.
• Interface—Select the interface name.
• Interface Status—Select to lock the port.
• Learning Mode—Select the type of port locking. To configure this field, the
Interface Status must be unlocked. The Learning Mode field is enabled only
if the Interface Status field is locked. To change the Learning Mode, the Lock
Interface must be cleared. After the mode is changed, the Lock Interface can
be reinstated. The options are:
- Classic Lock—Locks the port immediately, regardless of the number of
addresses that have already been learned.
- Limited Dynamic Lock—Locks the port by deleting the current dynamic
MAC addresses associated with the port. The port learns up to the
maximum addresses allowed on the port. Both re-learning and aging of
MAC addresses are enabled.
- Secure Permanent—Keeps the current dynamic MAC addresses
associated with the port and learns up to the maximum number of
addresses allowed on the port (set by Max No. of Addresses Allowed).
Relearning and aging are enabled.
- Secure Delete on Reset—Deletes the current dynamic MAC addresses
associated with the port after reset. New MAC addresses can be learned
as Delete-On-Reset ones up to the maximum addresses allowed on the
port. Relearning and aging are disabled.
• Max No. of Addresses Allowed—Enter the maximum number of MAC
addresses that can be learned on the port if Limited Dynamic Lock learning
mode is selected. The number 0 indicates that only static addresses are
supported on the interface.
18
319