Cisco Catalyst 2960 Series User Manual

How to Configure Port Security
Enabling and Configuring Port Security
Before You Begin
This task restricts input to an interface by limiting and identifying MAC addresses of the stations allowed to
access the port:
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
port-security mac-address forbidden mac address
4.
interface interface-id
5.
switchport mode {access | trunk}
6.
switchport voice vlan vlan-id
7.
switchport port-security
8.
switchport port-security [maximum value [vlan {vlan-list | {access | voice}}]]
9.
switchport port-security violation {protect | restrict | shutdown | shutdown vlan}
10.
switchport port-security [mac-address mac-address [vlan {vlan-id | {access | voice}}]
11.
switchport port-security mac-address sticky
12.
switchport port-security mac-address sticky [mac-address | vlan {vlan-id | {access | voice}}]
13.
switchport port-security mac-address forbidden mac address
14.
end
15.
show port-security
16.
show running-config
17.
copy running-config startup-config
DETAILED STEPS
PurposeCommand or Action
Enables privileged EXEC mode. Enter your password if prompted.enable
Step 1
Example:
Switch> enable
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 2
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1487
How to Configure Port Security

Cisco Catalyst 2960 Series Specifications

General

Layer	Layer 2
Power over Ethernet (PoE)	Available on some models
RAM	128 MB
Flash Memory	32 MB
MAC Address Table Size	8000
Operating Temperature	0°C to 45°C (32 to 113°F)
Ports	24 or 48 x 10/100/1000