Port Security

mohamedshajid

Hello guys well then i'm studying port security to switch actually, But i learn these few commands but i'm asking in this thread there is any advance commands is used for advance port security

int fa0/0
switchport mode access
switchport port-sec
switchport port-sec max 1
switchport port-sec violation restrict
switchport port-sec mac-add XXXX.XXXX.XXXX


Thanks in Advance.

SteveO86

I did a little write up of port-security some time ago, covers some of the commands mentioned
Protecting Cisco Switches: Port Security « CCIE or Null!

Your setup is statically configuring the mac address on a port so only that mac address will communicate through the port. If someone else connects a different device with another mac address to that port the traffic will get dropped.

Hope this helps.

JasonIT

I have been working on port security lately. Good article in your link, thanks for your contributions.

J

mohamedshajid

SteveO86 wrote: »

I did a little write up of port-security some time ago, covers some of the commands mentioned
Protecting Cisco Switches: Port Security « CCIE or Null!

Your setup is statically configuring the mac address on a port so only that mac address will communicate through the port. If someone else connects a different device with another mac address to that port the traffic will get dropped.

Hope this helps.

Hey steve thanks for your links mate, It's extraordinary things Yeah if different mac-add try to access on port-sec port probably my violation mode shutdown mostly it depends on Violation modes such as

Shutdown
Restrict
Protect

SteveO86

Yep there are a few different violation actions. The best violation action will depend on your correct environment.