Cisco Catalyst 4500 Series Administration Guide

49-10
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL_28731-01
Chapter 49 Configuring Port Security
Configuring Port Security on Access Ports
Note To clear dynamically learned port security MAC addresses in the CAM table, use the clear port-security
dynamic command. The address keyword enables you to clear a secure MAC addresses. The interface
keyword enables you to clear all secure addresses on any interface (including any port channel interface).
The VLAN keyword allows you to clear port security MACs on a per-VLAN per-port basis.
Examples of Port Security on Access Ports
The following examples are provided:
• Example 1: Setting Maximum Number of Secure Addresses, page 49-11
• Example 2: Setting a Violation Mode, page 49-11
• Example 3: Setting the Aging Timer, page 49-11
• Example 4: Setting the Aging Timer Type, page 49-12
• Example 5: Configuring a Secure MAC Address, page 49-12
• Example 6: Configuring Sticky Port Security, page 49-13
• Example 7: Setting a Rate Limit for Bad Packets, page 49-13
• Example 8: Clearing Dynamic Secure MAC Addresses, page 49-14
Step 10
Switch(config-if)# [no] switchport port-security
mac-address mac_address sticky [vlan [voice |
access]]
Specifies the sticky mac-address for the interface.
When you specify the vlan keyword, the mac-address
becomes sticky in the specified VLAN.
To delete a sticky secure MAC addresses from the address
table, use the
no switchport port-security mac-address mac_address
sticky command. To convert sticky to dynamic addresses,
use the no switchport port-security mac-address sticky
command.
Note This command only applies to access, PVLAN
host, and PVLAN promiscuous mode. For more
details on PVLAN or trunk or regular trunk mode,
refer to the “Configuring Port Security on Trunk
Ports” section on page 49-17.
Step 11
Switch(config-if)# end
Returns to privileged EXEC mode.
Step 12
Switch# show port-security address
interface interface_id
Switch# show port-security address
Verifies your entries.
Command Purpose

Cisco Catalyst 4500 Series Specifications

General

Series	Catalyst 4500 Series
Category	Switch
Layer Support	Layer 2, Layer 3
Form Factor	Modular chassis
Stackable	No
Chassis Slots	3, 6, 7, 10
Power Supply Options	AC, DC
Redundancy	Power supply, Supervisor engine
Network Management	Cisco IOS Software CLI, SNMP, Cisco Prime Infrastructure
Features	Security, QoS
Port Density	Up to 384 ports per chassis
Security Features	802.1X, ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard
Supervisor Engine	8-E