Setting The Maximum Number Of Secure Mac Addresses - Cisco WS-C2950SX-48-SI Configuration Manual

Configuring Port Security on the Switch
This example shows how to verify the port security:
Console> (enable) show port 2/1
Port
----- ------------------ ---------- ---------- ------ ------ ----- ------------
2/1
Port
----- -------- ----------------- ----------------- -------- -------- -------
2/1
Port
-------- --------------- --------------
2/1
Port
----- ---------- ---------- ---------- ---------- ---------
2/1
Port
----- ---------- ---------- ---------- ---------- --------- --------- ---------
2/1
Last-Time-Cleared
--------------------------
Fri Jul 10 1998, 17:53:38
This example shows how to enable port security on a port and manually specify the secure MAC address:
Console> (enable) set port security 2/1 enable 00-90-2b-03-34-08
Port 2/1 port security enabled with 00-90-2b-03-34-08 as the secure mac address
Trunking disabled for Port 2/1 due to Security Mode
Console> (enable)

Setting the Maximum Number of Secure MAC Addresses

You can set the number of MAC addresses to secure on a port. By default, at least one MAC address per
port can be secured. In addition to this default, a global resource of up to 1024 MAC addresses is
available to be shared by the ports. This means that if the entire global resource of 1024 MAC addresses
is used on some ports, you can still enable port security on the rest of the ports with a maximum of one
MAC per port.
If you reduce the maximum number of MAC addresses, the system clears the specified number of MAC
addresses and displays the list of removed addresses.
To set the number of MAC addresses to be secured on a port, perform this task in privileged mode:
Task
Set the number of MAC addresses to be secured
on a port.
This example shows how to set the number of MAC addresses to be secured:
Console> (enable) set port security 4/7 maximum 20
Maximum number of secure addresses
Console> (enable)
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
16-4
Name Status
connected
Security Secure-Src-Addr
enabled 00-90-2b-03-34-08 00-90-2b-03-34-08 No
Broadcast-Limit Broadcast-Drop
-
Align-Err FCS-Err Xmit-Err
0 0
Single-Col Multi-Coll Late-Coll
0 0
Vlan Level Duplex Speed Type
522 normal
Last-Src-Addr Shutdown Trap
0
Rcv-Err UnderSize
0 0
Excess-Col Carri-Sen Runts
0 0
Command
set port security mod_num/port_num maximum
num_of_mac
set to 20 for port 4/7.
—
Chapter 16 Configuring Port Security
half 100 100BaseTX
IfIndex
disabled 1081
0
Giants
0 0 0
Release 8.1
78-15486-01