Restricting Traffic For A Host Mac Address; Monitoring Port Security - Cisco WS-C2950SX-48-SI Configuration Manual

Monitoring Port Security

Restricting Traffic for a Host MAC Address

To restrict incoming or outgoing traffic for a specific MAC address, perform this task in privileged mode:
Task
Step 1
Restrict traffic that is destined to or originating
from a specific MAC address.
Step 2
Clear the filter.
Step 3
Verify the configuration.
This example shows how to create a filter for a specific MAC address:
Console> (enable) set cam static filter 00-02-03-04-05-06 1
Filter entry added to CAM table.
Console> (enable)
This example shows how to clear the filter:
Console> (enable) clear cam 00-02-03-04-05-06 1
CAM entry cleared.
Console> (enable)
This example shows how to display the static CAM entries:
Console> show cam static
VLAN
----
3
Console> (enable)
Monitoring Port Security
You can view the following port security information:
•
•
•
•
•
•
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
16-10
Dest MAC/Route Des
------------------
04-04-05-06-07-08 *
List of secure MAC addresses for a port
Maximum number of secure addresses that are allowed on a port
Total number of secure MAC addresses
Age and shutdown timeout
Shutdown and security mode
Statistics data related to port security
Command
set cam {static | permanent} filter unicast_mac
vlan
clear cam {static | permanent}
clear cam mac_address vlan
show cam mac_address vlan
show cam {static | permanent}
[CoS] Destination Ports or VCs / [Protocol Type]
----- -------------------------------------------
FILTER
Chapter 16 Configuring Port Security
—
Release 8.1
78-15486-01