55-2
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 55 Configuring Port Security
Port Security Commands
port-security mac-address Configures all secure MAC addresses
on each VLAN.
Secure MAC Addresses, page 55-3
port-security maximum Configures a maximum number of
MAC addresses on an interface.
Configuring Port Security on Access
Ports, page 55-7
private-vlan association add Creates an association between a
secondary VLAN and a primary
VLAN.
Example of Port Security on an
Isolated Private VLAN Host Port,
page 55-16
private-vlan isolated Designates the VLAN as a private
VLAN.
Configuring Port Security on an
Isolated Private VLAN Host Port,
page 55-14
private-vlan primary Specifies the VLAN as the primary
private VLAN.
Configuring Port Security on an
Isolated Private VLAN Host Port,
page 55-14
switchport mode private-vlan host Specifies that ports with valid private
VLAN trunk association become
active host private VLAN trunk
ports.
Configuring Port Security on an
Isolated Private VLAN Host Port,
page 55-14
switchport private-vlan
host-association
Defines a host association on an
isolated host port.
Configuring Port Security on an
Isolated Private VLAN Host Port,
page 55-14
switchport private-vlan mapping Defines a private VLAN for the
promiscuous ports.
Configuring Port Security on an
Isolated Private VLAN Host Port,
page 55-14
switchport port-security Enables port security. Configuring Port Security on Access
Ports, page 55-7
switchport port-security aging static Configures static aging of MAC
address.
Aging Secure MAC Addresses,
page 55-5
switchport port-security aging time Specifies an aging time for a port. Example 3: Setting the Aging Timer,
page 55-11
switchport port-security limit rate
invalid-source-mac
Sets the rate limit for bad packets. Example 7: Setting a Rate Limit for
Bad Packets, page 55-13
switchport port-security mac-address Configures a secure MAC address for
an interface.
Example 5: Configuring a Secure
MAC Address, page 55-12
switchport port-security mac-address
mac_address sticky
Specifies the sticky MAC address for
an interface.
Configuring Port Security on Access
Ports, page 55-7
switchport port-security mac-address
sticky
Enables sticky Port Security. Sticky Addresses on a Port,
page 55-5
no switchport port-security
mac-address sticky
Converts a sticky secure MAC
address to a dynamic MAC secure
address.
Configuring Port Security on Access
Ports, page 55-7
switchport port-security maximum Sets the maximum number of secure
MAC addresses for an interface.
Example 1: Setting Maximum
Number of Secure Addresses,
page 55-11
switchport port-security violation Sets the violation mode. Example 2: Setting a Violation
Mode, page 55-11
Command Purpose Navigation