Configuring Port Security On Voice Ports - Cisco Catalyst 4500 Series Configuration Manual

Chapter 47 Configuring Port Security

Configuring Port Security on Voice Ports

To configure port security on a voice port, perform this task:
Command
Step 1
Switch(config)# interface interface_id
Step 2
Switch(config-if)# switchport mode access
Step 3
Switch(config-if)# [no] switchport port-security
Step 4
Switch(config-if)# [no] switchport port-security
violation {restrict | shutdown}
Step 5
Switch(config-if)# switchport port-security limit
rate invalid-source-mac packets_per_sec
OL-25340-01
Purpose
Enters interface configuration mode and specifies the
physical interface to configure.
Sets the interface mode.
Note An interface in the default mode (dynamic auto)
cannot be configured as a secure port.
Enables port security on the interface.
To return the interface to the default condition as not
secured, use the no switchport port-security command.
(Optional) Sets the violation mode, the action to be taken
when a security violation is detected, as one of these:
• restrict—A port security violation restricts data and
causes the SecurityViolation counter to increment
and send an SNMP trap notification.
• shutdown—The interface is error-disabled when a
security violation occurs.
When a secure port is in the error-disabled state,
Note
you can bring it out of this state by entering the
errdisable recovery cause psecure-violation
global configuration command or you can
manually reenable it by entering the shutdown
and no shut down interface configuration
commands.
To return the violation mode to the default condition
(shutdown mode), use the no switchport port-security
violation shutdown command.
Sets the rate limit for bad packets.
Default is 10 pps.
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG
Configuring Port Security on Voice Ports
47-23