Cisco Catalyst 4500 Series - Page 1332

50-4
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Chapter 50 Configuring Auto Security
Configuring Auto Security
GigabitEthernet1/0/2
GigabitEthernet1/0/3
GigabitEthernet1/0/15
Switch# show running-config int g1/0/15
Building configuration...
Current configuration : 127 bytes
!
interface GigabitEthernet1/0/15
switchport trunk encapsulation dot1q
switchport mode trunk
auto security-port uplink
end
This example shows how to configure a port as an auto-security port host.
Switch# conf t
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)# int g1/0/18
Switch(config-if)# switchport mode access
Switch(config-if)# auto security-port host
Switch(config-if)# end
Switch#
Use the auto security and show running-config commands to confirm the prior configuration.
Switch# show auto security
Auto Security is Enabled globally
AutoSecure is Enabled on below interface(s):
--------------------------------------------
GigabitEthernet1/0/2
GigabitEthernet1/0/3
GigabitEthernet1/0/15
GigabitEthernet1/0/18
Switch# show run int g1/0/18
Building configuration...
Current configuration : 165 bytes
!
interface GigabitEthernet1/0/18
switchport access vlan 20
switchport mode access
switchport voice vlan 40
auto security-port host
spanning-tree portfast
Disabling Auto Security Feature for Access (End Hosts) or Uplink Ports
Use the no auto security-port command to disable auto security on a port:
Command Purpose
Step 1
Switch# configure terminal
Enters global configuration mode.
Step 2
Switch(config)# interface interface
Enters interface mode
Step 3
Switch(config-if)# no auto
security-port
Disables auto security on a port.
Step 4
Switch(config-if)# end
Exits to EXEC mode.