Table of Contents
Advertisement
15.1 Introduction to PORT SECURITY
Port security is a MAC address-based security mechanism for network access controlling. It is
an extension to the existing 802.1x authentication and MAC authentication. It controls the
access of unauthorized devices to the network by checking the source MAC address of the
received frame and the access to unauthorized devices by checking the destination MAC
address of the sent frame. With port security, you can define various port security modes to
make that a device learns only legal source MAC addresses, so as to implement
corresponding network security management. After port security is enabled, the device detects
an illegal frame, it triggers the corresponding port security feature and takes a pre-defined
action automatically. This reduces user's maintenance workload and greatly enhances system
security.
15.2 PORT SECURITY Configuration Task List
1. Basic configuration for PORT SECURITY
Command
Port mode
switchport port-security
no switchport port-security
switchport port-security mac-address
<mac-address> [vlan <vlan-id>]
no switchport port-security mac-address
<mac-address> [vlan <vlan-id>]
switchport port-security maximum <value> [vlan
<vlan-list>]
no switchport port-security maximum <value> [vlan
<vlan-list>]
switchport port-security violation {protect | restrict |
shutdown}
no switchport port-security violation
Chapter 15 PORT SECURITY
15-49
Explanation
Configure port-security of the
interface.
Configure the static security
MAC of the interface.
Configure the maximum
number of the security MAC
address allowed by the
interface.
When exceeding the maximum
number of the configured MAC
addresses, MAC address
accessing the interface does
not belongs to this interface in
Advertisement
Table of Contents
Troubleshooting
