Cisco Catalyst 4500 Series Command Reference Manual page 1062

switchport port-security
This example shows how to designate a maximum of one MAC address for a voice VLAN (for a Cisco
IP Phone, let's say) and one MAC address for the data VLAN (for a PC, let's say) on Fast Ethernet
interface 5/1 and to verify the configuration:
Switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)# interface fastethernet 5/1
Switch(config-if)# switchport mode access
Switch(config-if)# switchport port-security
Switch(config-if)# switchport port-security mac-address sticky
Switch(config-if)# switchport port-security maximum 1 vlan voice
Switch(config-if)# switchport port-security maximum 1 vlan access
Switch(config-if)# end
This example shows how to configure a port to shut down only the VLAN if a violation occurs:
Switch(config)# interface gigabitethernet 5/1
Switch(config)# switchport port-security violation shutdown vlan
Sending traffic to the ports causes the system to configure the port with sticky secure addresses.
Note
You can verify your settings by using the show port-security address privileged EXEC command.
Related Commands Command
show interfaces switchport
show port-security
switchport block
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release IOS XE 3.3.0SG and IOS 15.1(1)SG)
2-1004
Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
Description
Displays the administrative and operational status of a
switching (nonrouting) port.
Displays the port security settings for an interface or for the
switch.
Prevents the unknown multicast or unicast packets from
being forwarded.
OL-25342 -01