Xample of, Port, Security -84 – QTECH QSW-2800 Инструкция по настройке User Manual

Page 98: 3 example of port security

Advertising
background image

+7(495) 797-3311 www.qtech.ru
Москва, Новозаводская ул., 18, стр. 1

84

belongs to this interface in MAC address

table or a MAC address is configured to

several interfaces in same VLAN, both of

them will violate the security of the MAC

address.

switchport port-security aging {static | time

<value> | type {absolute | inactivity}}

no switchport port-security violation aging

{static | time | type}

Enable port-security aging entry of the

interface, specify aging time or aging type.

Admin mode

clear port-security {all | configured |

dynamic | sticky} [[address <mac-addr> |

interface <interface-id>] [vlan <vlan-id> ]]

Clear the secure MAC entry of the interface.

show port-security [interface <interface-

id>] [address | vlan]

Show port-security configuration.

12.3 Example of PORT SECURITY

Internet

HOST A

HOST B

SWITCH

Ethernet1/1

Typical topology chart for port security

When the interface enabled Port security function, configure the maximum number of the

secure MAC addresses allowed by a interface to be 10, the interface allows 10 users to

access the internet at most. If it exceeds the maximum number, the new user cannot access

the internet, so that it not only

limit the user’s number but also access the internet safely. If

configuring the maximum number of the secure MAC addresses as 1, only HOST A or HOST B

is able to access the internet.

Configuration process:

#Configure the switch.

Switch(config)#interface Ethernet 1/1

Switch(config-if- ethernet1/1)#switchport port-security

Advertising