Cisco Catalyst 4500 Series Configuration Manual page 603

Chapter 2
port-security mac-address
To configure a secure address on an interface for a specific VLAN or VLAN range, use the
port-security mac-address command.
Syntax Description mac_address
Command Modes
VLAN-range interface submode
Command History Release
12.2(25)EWA
Usage Guidelines
Layer 2 interfaces can be part of multiple VLANs (for example, a typical trunk port). In conjunction with
the vlan command, you can use the port-security mac-address command to specify different addresses
on different VLANs.
Examples The following example shows how to configure the secure address 1.1.1 on interface Gigabit Ethernet
1/1 for VLANs 2-3:
Switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)# interface gigabitethernet1/1
Switch(config-if)# switchport trunk encapsulation dot1q
Switch(config-if)# switchport mode trunk
Switch(config-if)# vlan 2-3
Switch(config-if-vlan-range)# port-security mac-address 1.1.1
Switch(config-if-vlan-range)# end
Switch#
Related Commands Command
port-security mac-address
sticky
port-security maximum
port-security mac-address mac_address
The MAC-address that needs to be secured.
Modification
This command was introduced on the Catalyst 4500 series switch.
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release XE 3.9.xE and 15.2(5)Ex
Description
Configures a sticky address on an interface for a specific VLAN
or VLAN range.
Configures the maximum number of addresses on an interface for
a specific VLAN or VLAN range.
port-security mac-address
2-563