Cisco Catalyst 2960-X Security Configuration Manual page 436

Enabling and Configuring Port Security
DETAILED STEPS
Command or Action
Step 1
enable
Example:
Switch> enable
Step 2
configure terminal
Example:
Switch# configure terminal
Step 3 interface interface-id
Example:
Switch(config)# interface
gigabitethernet1/0/1
Step 4 switchport mode {access | trunk}
Example:
Switch(config-if)# switchport
mode access
Step 5 switchport voice vlan vlan-id
Example:
Switch(config-if)# switchport
voice vlan 22
Step 6 switchport port-security
Example:
Switch(config-if)# switchport
port-security
Step 7
switchport port-security [maximum
value [vlan {vlan-list | {access |
voice}}]]
Example:
Switch(config-if)# switchport
port-security maximum 20
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
412
Purpose
Enables privileged EXEC mode. Enter your password if prompted.
Enters the global configuration mode.
Specifies the interface to be configured, and enter interface configuration mode.
Sets the interface switchport mode as access or trunk; an interface in the default
mode (dynamic auto) cannot be configured as a secure port.
Enables voice VLAN on a port.
vlan-id—Specifies the VLAN to be used for voice traffic.
Enable port security on the interface.
(Optional) Sets the maximum number of secure MAC addresses for the interface.
The maximum number of secure MAC addresses that you can configure on a
switch or switch stack is set by the maximum number of available MAC addresses
allowed in the system. This number is set by the active Switch Database
Management (SDM) template. This number is the total of available MAC
addresses, including those used for other Layer 2 functions and any other secure
MAC addresses configured on interfaces.
(Optional) vlan—sets a per-VLAN maximum value
Configuring Port-Based Traffic Control
OL-29048-01