Sec6: Port security

switchport mode access

switchport port-security

show cdp neighborhood

##

Switch port-security

 

switchport mode access

switchport port-security #Enable port security

Switch(config-if)#switchport port-security ?

  mac-address  #Secure mac address

  maximum      #Max secure addresses

violation    #Security violation mode

Switch(config-if)#switchport port-security  mac-address ?

  H.H.H   #48 bit mac address #Put Mac address directly, static mode

  sticky  #Configure dynamic secure addresses as sticky #Automatically learn mac address, doesn’t expire

Switch(config-if)#switchport port-security  violation ?

  protect  #Security violation protect mode #Drop the incoming packet but nothing

  restrict  #Security violation restrict mode #Drop the incoming packet and count the violation

  shutdown  #Security violation shutdown mode #Default, change status to down

Switch#show port-security

Switch#show port-security interface fastEthernet 0/1

 

 

Ref: https://youtu.be/Y4PT5hn-P08