QTECH QSW-3400 Инструкция по настройке - Manual (Page 110)

+7(495) 797-3311 www.qtech.ru
Москва, Новозаводская ул., 18, стр. 1
109
interfaces in same VLAN, both of
them will violate the security of
the MAC address.
switchport port-security aging {static | time <value> |
type {absolute | inactivity}}
no switchport port-security violation aging {static |
time | type}
Enable port-security aging entry
of the interface, specify aging
time or aging type.
Admin mode
clear port-security {all | configured | dynamic | sticky}
[[address <mac-addr> | interface <interface-id>] [vlan
<vlan-id> ]]
Clear the secure MAC entry of
the interface.
show port-security [interface <interface-id>] [address |
vlan]
Show port-security configuration.
13.3 Example of PORT SECURITY
Internet
HOST A
HOST B
SWITCH
Ethernet1/1
Typical topology chart for port security
When the interface enabled Port security function, configure the maximum number of the
secure MAC addresses allowed by a interface to be 10, the interface allows 10 users to
access the internet at most. If it exceeds the maximum number, the new user cannot access
the internet, so that it not only limit the user’s number but also access the internet safely. If
configuring the maximum number of the secure MAC addresses as 1, only HOST A or HOST B
is able to access the internet.
Configuration process:
#Configure the switch.
Switch(config)#interface Ethernet 1/1
Switch(config-if-ethernet1/1)#switchport port-security
Switch(config-if- ethernet1/1)#switchport port-security maximum 10