Enabling Port Security; Disabling Port Security - Cisco Catalyst 2950 Software Configuration Manual

Hide thumbs Also See for Catalyst 2950:
Table of Contents

Advertisement

Chapter 17
Configuring Port-Based Traffic Control

Enabling Port Security

Beginning in privileged EXEC mode, follow these steps to enable port security:
Command
Step 1
configure terminal
Step 2
interface interface-id
Step 3
switchport port-security
Step 4
switchport port-security
maximum max_addrs
Step 5
switchport port-security
violation {shutdown | restrict |
protect}
Step 6
end
Step 7
show port security [interface
interface-id] [address]
Step 8
copy running-config
startup-config

Disabling Port Security

Beginning in privileged EXEC mode, follow these steps to disable port security:
Command
Step 1
configure terminal
Step 2
interface interface-id
Step 3
no switchport port-security
Step 4
end
78-11380-04
Purpose
Enter global configuration mode.
Enter interface configuration mode for the port you want to secure.
Enable basic port security on the interface.
Set the maximum number of MAC addresses that is allowed on this
interface. The range is 1 to 132; the default is 1.
Set the security violation mode for the interface.
The default is shutdown.
For mode, select one of these keywords:
shutdown—The interface is error-disabled when a security
violation occurs.
Note
When a secure port is in the error-disabled state, you can
bring it out of this state by entering the errdisable recovery
cause psecure-violation global configuration command, or
you can manually re-enable it by entering the shutdown
and no shut down interface configuration commands.
restrict—A security violation sends a trap to the network
management station.
protect—When the port secure addresses reach the allowed
limit on the port, all packets with unknown addresses are
dropped.
Return to privileged EXEC mode.
Verify the entry.
(Optional) Save your entries in the configuration file.
Purpose
Enter global configuration mode.
Enter interface configuration mode for the port that you want to
unsecure.
Disable port security.
Return to privileged EXEC mode.
Catalyst 2950 Desktop Switch Software Configuration Guide
Configuring Port Security
17-5

Advertisement

Table of Contents
loading

Table of Contents