Enabling And Configuring Port Security - Cisco Catalyst 3750 Software Configuration Manual

Configuring Port Security

Enabling and Configuring Port Security

Beginning in privileged EXEC mode, follow these steps to restrict input to an interface by limiting and
identifying MAC addresses of the stations allowed to access the port:
Command
Step 1 configure terminal
Step 2
interface interface-id
Step 3
switchport mode {access | trunk}
Step 4
switchport port-security
Step 5 switchport port-security
maximum value [vlan [vlan-list]]
Catalyst 3750 Metro Switch Software Configuration Guide
18-10
Purpose
Enter global configuration mode.
Enter interface configuration mode, and enter the physical interface to
configure, for example gigabitethernet1/0/1.
Set the interface switchport mode as access or trunk; an interface in the
default mode (dynamic auto) cannot be configured as a secure port.
Enable port security on the interface.
(Optional) Set the maximum number of secure MAC addresses for the
interface. The maximum number of secure MAC addresses that you can
configure on a switch is determined by the maximum number of available
MAC addresses allowed in the system. This number is determined by the
active Switch Database Management (SDM) template. See
"Configuring SDM Templates."
MAC addresses, including those used for other Layer 2 functions and any
other secure MAC addresses configured on interfaces.
(Optional) For trunk ports, you can set the maximum number of secure MAC
addresses on a VLAN. If the vlan keyword is not entered, the default value is
used.
vlan—set a per-VLAN maximum value.
•
vlan vlan-list—set a per-VLAN maximum value on a range of VLANs
•
separated by a hyphen, or a series of VLANs separated by commas. For
non-specified VLANs, the per-VLAN maximum value is used.
Chapter 18 Configuring Port-Based Traffic Control
This number represents the total of available
Chapter 6,
78-15870-01