Enabling Port Security; Configuring Port Security - Cisco WS-SUP32-GE-3B - Supervisor Engine 32 Software Configuration Manual

Configuring Port Security

•
•
•
•
•
•
Configuring Port Security
These sections describe how to configure port security:
•
•
•
•
•
•

Enabling Port Security

These sections describe how to enable port security:
•
•
Enabling Port Security on a Trunk
Port security supports nonnegotiating trunks.
Because the default number of secure addresses is one and the default violation action is to shut down
Caution
the port, configure the maximum number of secure MAC addresses on the port before you enable port
security on a trunk (see
section on page
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
43-4
Port security uses the VLAN ID configured with the switchport trunk native vlan
Note
command for both IEEE 802.1Q trunks and ISL trunks.
Port security supports trunks.
Port security supports IEEE 802.1Q tunnel ports.
Port security does not support Switch Port Analyzer (SPAN) destination ports.
Port security does not support EtherChannel port-channel interfaces.
Port security and 802.1X port-based authentication cannot both be configured on the same port:
If you try to enable 802.1X port-based authentication on a secure port, an error message appears
–
and 802.1X port-based authentication is not enabled on the port.
If you try to enable port security on a port configured for 802.1X port-based authentication, an
–
error message appears and port security is not enabled on the port.
Take care when you enable port security on the ports connected to the adjacent switches when there
are redundant links running between the switches because port security might error-disable the ports
due to port security violations.
Enabling Port Security, page 43-4
Configuring the Port Security Violation Mode on a Port, page 43-6
Configuring the Maximum Number of Secure MAC Addresses on a Port, page 43-7
Enabling Port Security with Sticky MAC Addresses on a Port, page 43-8
Configuring a Static Secure MAC Address on a Port, page 43-9
Configuring Secure MAC Address Aging on a Port, page 43-10
Enabling Port Security on a Trunk, page 43-4
Enabling Port Security on an Access Port, page 43-5
"Configuring the Maximum Number of Secure MAC Addresses on a Port"
43-7).
Chapter 43 Configuring Port Security
OL-11439-03