Cisco Catalyst 2960-XR Security Configuration Manual page 367

Configuring Port-Based Traffic Control
SUMMARY STEPS
1. configure terminal
2. interface interface-id
3. switchport port-security aging {static | time time | type {absolute | inactivity}}
4. end
5. show port-security [interface interface-id] [address]
6. copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1 configure terminal
Example:
Switch# configure terminal
Step 2 interface interface-id
Example:
Switch(config)# interface
gigabitethernet1/0/1
Step 3
switchport port-security aging {static | time
time | type {absolute | inactivity}}
Example:
Switch(config-if)# switchport
port-security aging time 120
Step 4
end
Example:
Switch(config)# end
OL-29434-01
Purpose
Enters global configuration mode.
Specifies the interface to be configured, and enter interface
configuration mode.
Enables or disable static aging for the secure port, or set the aging
time or type.
Note The switch does not support port security aging of sticky
secure addresses.
Enter static to enable aging for statically configured secure addresses
on this port.
For time, specifies the aging time for this port. The valid range is
from 0 to 1440 minutes.
For type, select one of these keywords:
• absolute—Sets the aging type as absolute aging. All the secure
addresses on this port age out exactly after the time (minutes)
specified lapses and are removed from the secure address list.
• inactivity—Sets the aging type as inactivity aging. The secure
addresses on this port age out only if there is no data traffic
from the secure source addresses for the specified time period.
Returns to privileged EXEC mode.
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
Enabling and Configuring Port Security Aging
345