Chapter 9
| General Security Measures
Port Security
– 264 –
The following example shows the port security settings and number of secure
addresses for a specific port. The Last Intrusion MAC and Last Time Detected
Intrusion MAC fields show information about the last detected intrusion MAC
address. These fields are not applicable if no intrusion has been detected or port
security is disabled. The MAC Filter ID field is configured by the network-access
mac-filter command. If this field displays Disabled, then any unknown source MAC
address can be learned as a secure MAC address. If it displays a filter identifier, then
only source MAC address entries in MAC Filter table can be learned as secure MAC
addresses.
Console#show port security interface ethernet 1/2
Global Port Security Parameters
Secure MAC Aging Mode : Disabled
Port Security Details
Port : 1/2
Port Security : Enabled
Port Status : Secure/Up
Intrusion Action : None
Max MAC Count : 0
Current MAC Count : 0
MAC Filter : Disabled
Last Intrusion MAC : NA
Last Time Detected Intrusion MAC : NA
Console#
This example shows information about a detected intrusion.
Console#show port security interface ethernet 1/2
Global Port Security Parameters
Secure MAC Aging Mode : Disabled
Port Security Details
Port : 1/2
Port Security : Enabled
Port Status : Secure/Up
Intrusion Action : None
Max MAC Count : 0
Current MAC Count : 0
MAC Filter : Disabled
Last Intrusion MAC : 00-10-22-00-00-01
Last Time Detected Intrusion MAC : 2015/7/29 15:13:03
Console#
MaxMacCnt The maximum number of addresses which can be stored in the address table for
this interface (either dynamic or static).
CurrMacCnt The current number of secure entries in the address table.
Table 51: show port security - display description (Continued)
Field Description
To Next Page
Loading...
Need help?
General