Enabling Port Security - Cisco 7604 Configuration Manual

Chapter 47 Configuring Port Security

Enabling Port Security

These sections describe how to enable port security:
•
•
Enabling Port Security on a Trunk
With Release 12.2(18)SXE and later releases, port security supports nonnegotiating trunks.
Caution Because the default number of secure addresses is one and the default violation action is to shut down
the port, configure the maximum number of secure MAC addresses on the port before you enable port
security on a trunk (see
section on page
To enable port security on a trunk, perform this task:
Command
Step 1
Router(config)# interface type
Step 2
Router(config-if)# switchport
Step 3
Router(config-if)# switchport trunk encapsulation
{isl | dot1q}
Step 4
Router(config-if)# switchport mode trunk
Step 5
Router(config-if)# switchport nonegotiate
Step 6
Router(config-if)# switchport port-security
Router(config-if)# no switchport port-security
Step 7
Router(config-if)# do show port-security
1
interface type
1. type = ethernet, fastethernet, gigabitethernet, or tengigabitethernet
This example shows how to configure Fast Ethernet port 5/36 as a nonnegotiating trunk and enable port
security:
Router# configure terminal
Enter configuration commands, one per line.
Router(config)# interface fastethernet 5/36
Router(config-if)# switchport
Router(config-if)# switchport mode trunk
Router(config-if)# switchport nonegotiate
Router(config-if)# switchport port-security
Router(config-if)# do show port-security interface fastethernet 5/36 | include Port Security
Port Security
OL-4266-08
Enabling Port Security on a Trunk, page 47-5
Enabling Port Security on an Access Port, page 47-6
"Configuring the Maximum Number of Secure MAC Addresses on a Port"
47-9).
1
slot/port
slot/port | include Port Security
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
Purpose
Selects the LAN port to configure.
Configures the port as a Layer 2 switchport.
Configures the encapsulation, which configures the Layer
2 switching port as either an ISL or 802.1Q trunk.
Configures the port to trunk unconditionally.
Configures the trunk not to use DTP.
Enables port security on the trunk.
Disables port security on the trunk.
Verifies the configuration.
End with CNTL/Z.
: Enabled
Configuring Port Security
47-5