Use the switchport port-security
interface command with keywords to con?¬?gure a secure MAC address, a maximum number
of secure MAC addresses, or the violation mode. Use the no form of this command to
disable port security or to set the parameters to their default state. Example 2-8 shows the
commands used to con?¬?gure port security.
A port must be in access mode (not trunk mode) to enable port security.
You can add secure (speci?¬?c) MAC addresses to the MAC address table after you set the
maximum number of secure MAC addresses allowed on a port in these ways:
?– Manually con?¬?gure all the addresses (switchport port-security mac-address
0008.eeee.eeee)
?– Allow the port to dynamically con?¬?gure all the addresses (switchport port-security
mac-address sticky)
?– Con?¬?gure a number of MAC addresses and allow the rest of the addresses to be
dynamically con?¬?gured
You can con?¬?gure an interface to convert the dynamic MAC addresses to sticky secure
MAC addresses and to add them to the running con?¬?guration by enabling sticky learning.
To enable sticky learning, enter the switchport port-security mac-address sticky
interface con?¬?guration command. When you enter this command, the interface converts all
the dynamic secure MAC addresses, including those that were dynamically learned before
sticky learning was enabled, to sticky secure MAC addresses.
Pages:
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266