Cisco Nexus 9000 Series - Verifying the Port Security Configuration; Displaying Secure MAC Addresses; Configuration Example for Port Security

PurposeCommand or Action
switch(config-if)# switchport port-security
violation restrict
Displays the port security configuration.(Optional) show running-config port-security
Example:
Step 4
switch(config-if)# show running-config
port-security
Copies the running configuration to the startup
configuration.
(Optional) copy running-config startup-config
Example:
Step 5
switch(config-if)# copy running-config
startup-config
Verifying the Port Security Configuration
To display the port security configuration information, perform one of the following tasks.
PurposeCommand
Displays the port security configuration.show running-config port-security
Displays the port security status of the device.show port-security
Displays the port security status of a specific interface.show port-security interface
Displays secure MAC addresses.show port-security address
Verifies configuration on both vPC peers.show vpc consistency-parameters vpc id
Displaying Secure MAC Addresses
Use the show port-security address command to display secure MAC addresses.
Configuration Example for Port Security
The following example shows a port security configuration for the Ethernet 2/1 interface with VLAN and
interface maximums for secure addresses. In this example, the interface is a trunk port. Additionally, the
violation action is set to Restrict.
feature port-security
interface Ethernet 2/1
switchport
switchport port-security
switchport port-security maximum 10
switchport port-security maximum 7 vlan 10
switchport port-security maximum 3 vlan 20
switchport port-security violation restrict
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
323
Configuring Port Security
Verifying the Port Security Configuration