Cisco Catalyst 4500 Series Administration Guide

49-2
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL_28731-01
Chapter 49 Configuring Port Security
Port Security Commands
Port Security Commands
This table lists the commands most commonly used with port security.
Command Purpose Navigation
errdisable recovery cause
psecure-violation
Brings a secure port out of
error-disabled state.
Violation Actions, page 49-6
errdisable recovery interval Customizes the time to recover from
a specified error disable cause.
Violation Actions, page 49-6
port-security mac-address Configures all secure MAC addresses
on each VLAN.
Secure MAC Addresses, page 49-4
port-security maximum Configures a maximum number of
MAC addresses on an interface.
Configuring Port Security on Access
Ports, page 49-7
private-vlan association add Creates an association between a
secondary VLAN and a primary
VLAN.
Example of Port Security on an
Isolated Private VLAN Host Port,
page 49-16
private-vlan isolated Designates the VLAN as a private
VLAN.
Configuring Port Security on an
Isolated Private VLAN Host Port,
page 49-14
private-vlan primary Specifies the VLAN as the primary
private VLAN.
Configuring Port Security on an
Isolated Private VLAN Host Port,
page 49-14
switchport mode private-vlan host Specifies that ports with valid private
VLAN trunk association become
active host private VLAN trunk
ports.
Configuring Port Security on an
Isolated Private VLAN Host Port,
page 49-14
switchport private-vlan
host-association
Defines a host association on an
isolated host port.
Configuring Port Security on an
Isolated Private VLAN Host Port,
page 49-14
switchport private-vlan mapping Defines a private VLAN for the
promiscuous ports.
Configuring Port Security on an
Isolated Private VLAN Host Port,
page 49-14
switchport port-security Enables port security. Configuring Port Security on Access
Ports, page 49-7
switchport port-security aging static Configures static aging of MAC
address.
Aging Secure MAC Addresses,
page 49-5
switchport port-security aging time Specifies an aging time for a port. Example 3: Setting the Aging Timer,
page 49-11
switchport port-security limit rate
invalid-source-mac
Sets the rate limit for bad packets. Example 7: Setting a Rate Limit for
Bad Packets, page 49-13
switchport port-security mac-address Configures a secure MAC address for
an interface.
Example 5: Configuring a Secure
MAC Address, page 49-12
switchport port-security mac-address
mac_address sticky
Specifies the sticky MAC address for
an interface.
Configuring Port Security on Access
Ports, page 49-7

Cisco Catalyst 4500 Series Specifications

General

Series	Catalyst 4500 Series
Category	Switch
Layer Support	Layer 2, Layer 3
Form Factor	Modular chassis
Stackable	No
Chassis Slots	3, 6, 7, 10
Power Supply Options	AC, DC
Redundancy	Power supply, Supervisor engine
Network Management	Cisco IOS Software CLI, SNMP, Cisco Prime Infrastructure
Features	Security, QoS
Port Density	Up to 384 ports per chassis
Security Features	802.1X, ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard
Supervisor Engine	8-E