Chapter 6: Implementing Switch Port Security

switchport mode access

Interface configuration mode command that sets the interface to always be an access port on GigabitEthernet1/0/10.

switchport port-security mac-address 00AA.BBCC.DDEE

Interface configuration mode command that statically adds MAC address 00AA.BBCC.DDEE as an allowed secure MAC on GigabitEthernet1/0/10.

switchport port-security mac-address sticky 00BB.CCDD.EEFF

Interface subcommand that tells the switch to learn MAC addresses on GigabitEthernet1/0/10 and add 00BB.CCDD.EEFF to the running configuration as a secure MAC address.

switchport port-security maximum 2

Interface subcommand that sets the maximum number of secure MAC addresses on GigabitEthernet1/0/10 to 2.

switchport port-security violation shutdown

Interface subcommand that configures GigabitEthernet1/0/10 to shut down if an unauthorized MAC address is detected.

errdisable recovery cause psecure-violation

Global command that enables automatic recovery for ports err-disabled due to port-security violations.

errdisable recovery interval 30

Global command that sets the recovery delay for err-disabled ports to 30 seconds.

shutdown

Interface subcommand that administratively disables GigabitEthernet1/0/10.

no shutdown

Interface subcommand that administratively enables GigabitEthernet1/0/10.

show running-config

Displays the entire running configuration of the switch.

show running-config interface GigabitEthernet1/0/10

Displays the running configuration and subcommands for interface GigabitEthernet1/0/10.

show mac address-table dynamic interface GigabitEthernet1/0/11

Lists dynamically learned MAC addresses on GigabitEthernet1/0/11.

show mac address-table secure interface GigabitEthernet1/0/12

Lists secure MAC addresses defined or learned on GigabitEthernet1/0/12.

show mac address-table static interface GigabitEthernet1/0/13

Lists static MAC addresses on GigabitEthernet1/0/13.

show interfaces GigabitEthernet1/0/14 status

Lists a one-line status for GigabitEthernet1/0/14, showing description, state, duplex, and speed.

show port-security interface GigabitEthernet1/0/15

Displays port-security configuration and status for GigabitEthernet1/0/15.

show port-security

Lists a summary of port-security settings for all interfaces where it is enabled.