21-11
Catalyst 3550 Multilayer Switch Software Configuration Guide
78-11194-09
Chapter 21 Configuring Port-Based Traffic Control
Configuring Port Security
Enabling and Configuring Port Security
Beginning in privileged EXEC mode, follow these steps to restrict input to an interface by limiting and
identifying MAC addresses of the stations allowed to access the port:
Command Purpose
Step 1
configure terminal Enter global configuration mode.
Step 2
interface interface-id Specify the type and number of the physical interface to configure, for
example gigabitethernet0/1, and enter interface configuration mode.
Step 3
switchport mode {access | trunk} Set the interface mode as access or trunk; an interface in the default
mode (dynamic desirable) cannot be configured as a secure port.
Step 4
switchport port-security Enable port security on the interface.
Step 5
switchport port-security maximum
value [vlan [vlan-list]]
(Optional) Set the maximum number of secure MAC addresses for the
interface. The maximum number of available addresses is determined by
the active Switch Database Management (SDM) template. The default
is 1.
(Optional) For trunk ports, you can set the maximum number of secure
MAC addresses on a VLAN:
• vlan—set a per-VLAN maximum value.
• vlan vlan list—set a per-VLAN maximum value on a range of
VLANs separated by a hyphen or a series of VLANs separated by a
comma. For nonspecified VLANs, the per-VLAN maximum value
is used. If no per-VLAN maximum value is entered, the default
value is used.
To Next Page
Loading...
Need help?
General
