Cisco CATALYST 2960 User Manual

23-17
Catalyst 2960 and 2960-S Switches Software Configuration Guide, Release 15.0(1)SE
OL-26520-01
Chapter 23 Configuring Port-Based Traffic Control
Configuring Port Security
Beginning in privileged EXEC mode, follow these steps to configure port security aging:
To disable port security aging for all secure addresses on a port, use the no switchport port-security
aging time interface configuration command. To disable aging for only statically configured secure
addresses, use the no switchport port-security aging static interface configuration command.
This example shows how to set the aging time as 2 hours for the secure addresses on a port:
Switch(config)# interface gigabitethernet1/0/1
Switch(config-if)# switchport port-security aging time 120
This example shows how to set the aging time as 2 minutes for the inactivity aging type with aging
enabled for the configured secure addresses on the interface:
Switch(config-if)# switchport port-security aging time 2
Switch(config-if)# switchport port-security aging type inactivity
Switch(config-if)# switchport port-security aging static
You can verify the previous commands by entering the show port-security interface interface-id
privileged EXEC command.
Command Purpose
Step 1
configure terminal Enter global configuration mode.
Step 2
interface interface-id Specify the interface to be configured, and enter interface
configuration mode.
Step 3
switchport port-security aging {static | time time |
type {absolute | inactivity}}
Enable or disable static aging for the secure port, or set the
aging time or type.
Note The switch does not support port security aging of
sticky secure addresses.
Enter static to enable aging for statically configured secure
addresses on this port.
For time, specify the aging time for this port. The valid range is
from 0 to 1440 minutes.
For type, select one of these keywords:
• absolute—Sets the aging type as absolute aging. All the
secure addresses on this port age out exactly after the time
(minutes) specified lapses and are removed from the secure
address list.
• inactivity—Sets the aging type as inactivity aging. The
secure addresses on this port age out only if there is no data
traffic from the secure source addresses for the specified
time period.
Step 4
end Return to privileged EXEC mode.
Step 5
show port-security [interface interface-id]
[address]
Verify your entries.
Step 6
copy running-config startup-config (Optional) Save your entries in the configuration file.

Cisco CATALYST 2960 Specifications

General

Manageable	Yes
Stacking	No
Model	Catalyst 2960 Series Switches
Power over Ethernet (PoE)	Available on some models (IEEE 802.3af)
VLANs	255 active VLANs
Features	QoS
Operating Temperature	32 to 113°F (0 to 45°C)
Relative Humidity	10% to 85% non-condensing
Power Consumption	Varies by model (30W to 400W)