56-5
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
 
Chapter 56      Configuring Auto Security
Configuring Auto Security
 switchport mode trunk
 auto security-port uplink
end
Switch# conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)# int g1/0/15
Switch(config-if)# no auto security-port
Switch(config-if)# end
Switch# show run int g1/0/15
Building configuration...
Current configuration : 110 bytes
!
interface GigabitEthernet1/0/15
 switchport trunk encapsulation dot1q
 switchport mode trunk
end
show command
Use the show auto security command, verify the status of auto-security on the interface and global level.
Use the show auto security [configuration] command, to view the CLIs that are applied with AS.
This example shows the output of the show auto security command when AS is enabled:
Switch# show auto security
Auto Security is Enabled globally
AutoSecurity is Enabled on below interface(s): 
--------------------------------------------
   GigabitEthernet2/0/2
   GigabitEthernet2/0/3
   GigabitEthernet2/0/4
   GigabitEthernet2/0/5
   GigabitEthernet2/0/6
   GigabitEthernet2/0/7
   GigabitEthernet2/0/8
   GigabitEthernet2/0/9
This example shows the output of the show auto security configuration command when AS is enabled:
Switch# show auto security configuration
%AutoSecurity provides a single CLI config 'auto security'
 to enable Base-line security Features like 
 DHCP snooping, ARP inspection and Port-Security
Auto Security CLIs applied globally:
-----------------------------------
ip dhcp snooping
ip dhcp snooping vlan 2-1005
no ip dhcp snooping information option
ip arp inspection vlan 2-1005
ip arp inspection validate src-mac dst-mac ip
Auto Security CLIs applied on Access Port:
------------------------------------------
switchport port-security
switchport port-security maximum 2
switchport port-security maximum vlan access 1
switchport port-security maximum vlan voice 1
switchport port-security violation restrict
switchport port-security aging time 2
switchport port-security aging type inactivity
ip arp inspection limit rate 100
ip dhcp snooping limit rate 100