Configuring A Static Secure Mac Address On A Port - Cisco 7604 Configuration Manual

Chapter 47 Configuring Port Security

Configuring a Static Secure MAC Address on a Port

To configure a static secure MAC address on a port, perform this task:
Command
Step 1
Router(config)# interface type
Step 2
Router(config-if)# switchport port-security
mac-address [sticky] mac_address [vlan vlan_ID ]
Router(config-if)# no switchport port-security
mac-address [sticky] mac_address
Step 3
Router(config-if)# end
Step 4
Router# show port-security address
1. type = ethernet, fastethernet, gigabitethernet, or tengigabitethernet
When configuring a static secure MAC address on a port, note the following information:
•
•
•
•
This example shows how to configure a MAC address 1000.2000.3000 as secure on Fast Ethernet port
5/12 and verify the configuration:
Router# configure terminal
Enter configuration commands, one per line.
Router(config)# interface fastethernet 5/12
Router(config-if)# switchport port-security mac-address 1000.2000.3000
Router(config-if)# end
Router# show port-security address
------------------------------------------------------------
Vlan
----
1
OL-4266-08
1
slot/port
With Release 12.2(18)SXE and later releases, you can configure sticky secure MAC addresses if
port security with sticky MAC addresses is enabled (see the
MAC Addresses on a Port" section on page
The maximum number of secure MAC addresses on the port, configured with the switchport
port-security maximum command, defines how many secure MAC addresses you can configure.
If you configure fewer secure MAC addresses than the maximum, the remaining MAC addresses are
learned dynamically.
With Release 12.2(18)SXE and later releases, port security is supported on trunks.
On a trunk, you can configure a static secure MAC address in a VLAN.
–
– On a trunk, if you do not configure a VLAN for a static secure MAC address, it is secure in the
VLAN configured with the switchport trunk native vlan command.
Secure Mac Address Table
Mac Address Type
----------- ----
1000.2000.3000 SecureConfigured
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
Purpose
Selects the LAN port to configure.
Configures a static MAC address as secure on the port.
Per-VLAN configuration is supported only on
Note
trunks.
Clears a static secure MAC address from the port.
Exits configuration mode.
Verifies the configuration.
"Enabling Port Security with Sticky
47-10).
End with CNTL/Z.
Ports
-----
Fa5/12
Configuring Port Security
47-11