Cisco Catalyst 4500 Series - Page 1331

50-3
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Chapter 50 Configuring Auto Security
Configuring Auto Security
Disabling auto security globally
To disable auto security globally, perform this task:
This example show how to dis-enable auto security globally:
Switch(config)# no auto security
Switch# show auto security
Auto Security is Disabled globally
AutoSecure is Enabled on below interface(s):
--------------------------------------------
Switch#
Enabling Auto Security Feature for Access (End Hosts) or Trunk (Uplink) Ports
Use the auto security-port [host | uplink] command, to enable auto security for access (end hosts) and
uplink ports:
This example displays how to enable auto security for an uplink port:
This example shows how to configure a port as auto security-port uplink.
Switch# conf t
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)# int g1/0/15
Switch(config-if)# switchport mode trunk
Switch(config-if)# auto security-port uplink
Switch(config-if)# end
Use the show auto security and show running-config commands confirm the prior configuration.
Switch# show auto security
Auto Security is Enabled globally
AutoSecure is Enabled on below interface(s):
--------------------------------------------
Command Purpose
Step 1
Switch# configure terminal
Enters global configuration mode.
Step 2
Switch(config)# no auto security
Dis-enables auto security globally.
Step 3
Switch(config)# end
Returns to privileged EXEC mode.
Step 4
Switch# show running-config | isecurity
(Optional) Saves your entries in the configuration file.
Command Purpose
Step 1
Switch# configure terminal
Enters global configuration mode.
Step 2
Switch(config)# interface interface
Enters interface mode
Step 3
Switch(config-if)# auto security-port
[host | uplink]
Enables auto security on host or uplink ports.
Step 4
Switch(config)# end
Returns to privileged EXEC mode.
Step 5
Switch# show auto security
Displays the status of auto security.