Cisco Catalyst 3550 Series User Manual

21-14
Catalyst 3550 Multilayer Switch Software Configuration Guide
78-11194-09
Chapter 21 Configuring Port-Based Traffic Control
Configuring Port Security
Switch(config-if)# switchport port-security mac-address sticky
Switch(config-if)# end
Switch# show port-security address
= Secure Mac Address Table
-------------------------------------------------------------------
Vlan Mac Address Type Ports Remaining Age
(mins)
---- ----------- ---- ----- -------------
1 0000.0000.000a SecureDynamic Fa0/1 -
1 0000.0002.0300 SecureDynamic Fa0/1 -
1 0000.0200.0003 SecureConfigured Fa0/1 -
1 0000.0200.0004 SecureConfigured Fa0/12 -
1 0003.fd62.1d40 SecureConfigured Fa0/5 -
1 0003.fd62.1d45 SecureConfigured Fa0/5 -
1 0003.fd62.21d3 SecureSticky Fa0/5 -
1 0005.7428.1a45 SecureSticky Fa0/8 -
1 0005.7428.1a46 SecureSticky Fa0/8 -
1 0006.1218.2436 SecureSticky Fa0/8 -
-------------------------------------------------------------------
Total Addresses in System :10
Max Addresses limit in System :6176
This example shows how to configure a maximum of eight secure MAC addresses on VLAN 5 on Fast
Ethernet port 12 and verify the configuration:
Switch(config-if)# switchport port-security maximum 8 vlan 5
Switch(config-if)# end
Switch# show port-security interface fastethernet0/12 vlan
Default maximum: not set, using 6176
VLAN Maximum Current
1 default 0
5 8 0
Enabling and Configuring Port Security Aging
You can use port security aging to set the aging time for static and dynamic secure addresses on a port.
Two types of aging are supported per port:
• Absolute—The secure addresses on the port are deleted after the specified aging time.
• Inactivity—The secure addresses on the port are deleted only if the secure addresses are inactive for
the specified aging time.
Use this feature to remove and add PCs on a secure port without manually deleting the existing secure
MAC addresses and to still limit the number of secure addresses on a port. You can enable or disable the
aging of statically configured secure addresses on a per-port basis.

Cisco Catalyst 3550 Series Specifications

General

Form Factor	Rack-mountable
Manageable	Yes
RAM	64 MB
Device Type	Switch
MAC Address Table Size	12000 entries
Routing Protocol	RIP
Features	VLAN support
Power Supply	AC 120/230 V (50/60 Hz)
Ports	24 or 48 x 10/100Base-TX, 1 x GBIC, 2 x 10/100/1000Base-T
Operating Temperature	32 to 113°F (0 to 45°C)