C
HAPTER
28
| General Security Measures
Port Security
– 709 –
â—† The mac-learning commands cannot be used if 802.1X Port
Authentication has been globally enabled on the switch with the dot1x
system-auth-control command, or if MAC Address Security has been
enabled by the port security command on the same interface.
EXAMPLE
The following example disables MAC address learning for port 2.
Console(config)#interface ethernet 1/2
Console(config-if)#no mac-learning
Console(config-if)#
RELATED COMMANDS
show interfaces status (780)
port security This command enables or configures port security. Use the no form without
any keywords to disable port security. Use the no form with the
appropriate keyword to restore the default settings for a response to
security violation or for the maximum number of allowed addresses.
SYNTAX
port security [action {shutdown | trap | trap-and-shutdown}
| max-mac-count address-count]
no port security [action | max-mac-count]
action - Response to take when port security is violated.
shutdown - Disable port only.
trap - Issue SNMP trap message only.
trap-and-shutdown - Issue SNMP trap message and disable
port.
max-mac-count
address-count - The maximum number of MAC addresses that
can be learned on a port. (Range: 0 - 1024, where 0 means
disabled)
DEFAULT SETTING
Status: Disabled
Action: None
Maximum Addresses: 0
COMMAND MODE
Interface Configuration (Ethernet)
COMMAND USAGE
â—† When port security is enabled with this command, the switch first clears
all dynamically learned entries from the address table. It then starts
learning new MAC addresses on the specified port, and stops learning
To Next Page
Loading...
Need help?
General
