Cisco Catalyst 4500 Series Command Reference Manual page 1115

Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
You can verify the settings for all secure ports or the specified port by using the show port-security
privileged EXEC command.
This example shows how to remove all sticky and static addresses that are configured on the interface:
Switch(config)# interface fastethernet 2/12
Switch(config-if)# no switchport port-security mac-address
Switch(config-if)
This example shows how to configure a secure MAC address on Fast Ethernet port 12:
Switch(config)# interface fastethernet 0/12
Switch(config-if)# switchport mode access
Switch(config-if)# switchport port-security
Switch(config-if)# switchport port-security mac-address 1000.2000.3000
Switch(config-if)
This example shows how to make all MAC addresses learned on Fast Ethernet port 12 sticky:
Switch(config)# interface fastethernet 2/12
SSwitch(config-if)# switchport port-security mac-address sticky
Switch(config-if)
This example shows how to make MAC address 1000.2000.3000 sticky on Fast Ethernet port 12:
Switch(config)# interface fastethernet 2/12
Switch(config-if)# switchport port-security mac-address sticky 1000.2000.3000
Switch(config-if)
This example shows how to disable the sticky feature on Fast Ethernet port 12:
Switch(config)# interface fastethernet 2/12
Switch(config-if)# no switchport port-security mac-address sticky
Switch(config-if)
This command makes all sticky addresses on this interface normal learned entries. It does not delete the
Note
entries from the secure MAC address table.
The following examples show how to configure sticky secure MAC addresses in access and voice
Note
VLANs on interfaces with voice VLAN configured. If you do not have voice VLAN configured the
vlan [access | voice] keywords are not supported.
This example shows how to configure sticky MAC addresses for voice and data VLANs on Fast Ethernet
interface 5/1 and to verify the configuration:
Switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)# interface fa5/1
Switch(config-if)# switchport mode access
Switch(config-if)# switchport port-security
Switch(config-if)# switchport port-security mac-address sticky 0000.0000.obob vlan voice
Switch(config-if)# switchport port-security mac-address sticky 0000.0000.0005 vlan access
Switch(config-if)# end
This example shows how to designate a maximum of one MAC address for a voice VLAN (for a Cisco
IP Phone, let's say) and one MAC address for the data VLAN (for a PC, let's say) on Fast Ethernet
interface 5/1 and to verify the configuration:
Switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
OL-27596 -01
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release IOS XE 3.4.0SG and IOS 15.1(2)SG)
switchport port-security
2-1057