Restricting Traffic Based On Host Mac Address; Monitoring Port Security - Cisco WS-C4003 - Catalyst 4000 Chassis Switch Software Configuration Manual

Configuring Port Security
3/24
Console> (enable)

Restricting Traffic Based on Host MAC Address

To restrict incoming or outgoing traffic for a specific MAC address, perform this task in privileged mode:
Task
Step 1
Discard traffic destined to or originating from a
specific MAC address.
Step 2 Clear the filter.
Step 3 Verify the configuration.
This example shows how to create a filter for a specific MAC address:
Console> (enable) set cam static filter 00-02-03-04-05-06 1
Filter entry added to CAM table.
Console> (enable)
This example shows how to clear the filter:
Console> (enable) clear cam 00-02-03-04-05-06 1
CAM entry cleared.
Console> (enable)
This example shows how to display the static CAM entries:
Console> show cam static
VLAN
----
3

Monitoring Port Security

You can view the following port security information:
•
•
•
•
•
•
•
To display port security configuration information and statistics, perform this task in privileged mode:
Software Configuration Guide—Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4
16-8
1 00-e0-4f-ac-b4-00
Dest MAC/Route Des
------------------
04-04-05-06-07-08 *
List of secure MAC addresses for a port
Maximum number of secure addresses allowed on a port
Total number of secure MAC addresses
Age
Age left and shutdown timeout left
Shutdown and security mode
Statistics data related to port security
-
Command
set cam static | permanent filter unicast_mac
vlan
clear cam static | permanent
clear cam mac_address vlan
show cam mac_address vlan
show cam static | permanent
[CoS] Destination Ports or VCs / [Protocol Type]
----- -------------------------------------------
FILTER
Chapter 16 Configuring Port Security
- - -
78-12647-02