Overview Of Port-Based Traffic Control; How To Configure Port Security; Enabling And Configuring Port Security - Cisco Catalyst 2960-X Security Configuration Manual

Configuring Port-Based Traffic Control

Overview of Port-Based Traffic Control

Port-based traffic control is a set of Layer 2 features on the Cisco Catalyst switches used to filter or block
packets at the port level in response to specific traffic conditions. The following port-based traffic control
features are supported in the Cisco IOS Release for which this guide is written:
• Storm Control
• Protected Ports
• Port Blocking
• Port Security
• Protocol Storm Protection

How to Configure Port Security

Enabling and Configuring Port Security

Before You Begin
This task restricts input to an interface by limiting and identifying MAC addresses of the stations allowed to
access the port:
SUMMARY STEPS
1. enable
2. configure terminal
3. interface interface-id
4. switchport mode {access | trunk}
5. switchport voice vlan vlan-id
6. switchport port-security
7. switchport port-security [maximum value [vlan {vlan-list | {access | voice}}]]
8. switchport port-security violation {protect | restrict | shutdown | shutdown vlan}
9. switchport port-security [mac-address mac-address [vlan {vlan-id | {access | voice}}]
10. switchport port-security mac-address sticky
11. switchport port-security mac-address sticky [mac-address | vlan {vlan-id | {access | voice}}]
12. end
13. show port-security
14. show running-config
15. copy running-config startup-config
OL-29048-01
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
Overview of Port-Based Traffic Control
411