Planet IGSW-2840 User Manual page 467

Use the port security command to enable security on a port. Then use the port security action command to set the
response to a port security violation, and the port security max-mac-count command to set the maximum number of
addresses allowed on a port.
You can also manually add secure addresses with the mac-address-table static command.
A secure port has the following restrictions:
-Cannot be connected to a network interconnection device.
-Cannot be a trunk port.
If a port is disabled due to a security violation, it must be manually re-enabled using the no shutdown command.
Example
Example
The following
message:
Console(config)#interface ethernet 1/5
Console(config-if)#port security
Console(config-if)#port security action trap
Console(config-if)#
Related Commands
shutdown
mac-address-table static
show mac-address-table
5.13.2 Network Access (MAC Address Authentication)
Network Access authentication controls access to the network by authenticating the MAC address of each host that attempts to
connect to a switch port. Traffic received from a specific MAC address is forwarded by the switch only if the source MAC
address is successfully authenticated by a central RADIUS server. While authentication for a MAC address is in progress, all
traffic is blocked until authentication is completed. Once successfully authenticated, the RADIUS server may optionally assign
VLAN settings for the switch port.
Command
network-access mode
network-access
max-mac-count
mac-authentication
intrusion-action
mac-authentication
enables port security for port 5, and sets the response to a security violation to issue a trap
Function
Enables MAC authentication on an interface
Sets a maximum for authenticated MAC addresses on an
interface
Determines the port response when a connected host fails MAC
authentication.
Sets a maximum for mac-authentication autenticated MAC
467
User's Manual of IGSW-2840
Mode
IC
IC
IC
IC