Port Security is a network security feature restricting access to switch ports based on MAC addresses. It allows only specific devices to connect to a port, preventing unauthorized access and mitigating MAC flooding attacks. Administrators can configure limits on the number of MAC addresses per port and specify actions like shutdown, restrict, or protect in case of violations.<\/p>\n\n
\n#Port Security\t(based on MAC address)\nenable\n\tconfigure terminal\n\tshow mac address-table\n\tshow port-security\n\tshow port-security <interface>\n\tshow errdisable recovery\n\t\terrdisable recovery cause psecure-violation\t\t\t\t#to enable auto recovery from err-disabled state, after Port Security Violation\n\t\terrdisable recovery interval <seconds>\t\t\t\t\t#to set timer for auto recovery\n\t\t\n\t\tinterface <interface>\n\t\t\tswitchport port-security\n\t\t\tswitchport port-security maximum <number>\t\t\t#number of MAC addresses allows on the interface\n\t\t\tswitchport port-security mac-address <MAC address>\t#to set MAC address manually, or gets auto the first MAC\n\t\t\tswitchport port-security mac-address sticky\t\t#to set MAC in dynamic mode, until a switch reboot\n\n\t\t\tswitchport port-security violation {shutdown | restrict | protect}\n#\t\t\t\t-shutdown - the port will shutdown\n#\t\t\t\t-restrict - the port won`t shutdown, just will blocks unauth MAC address\n#\t\t\t\t-protect - the port won`t shutdown, just will blocks unauth MAC address, and won`t send any notification\n\n\t\t\tswitchport port-security aging timer <minutes>\t\t\t\t\t#\n\t\t\tswitchport port-security aging static\t\t\t\t\t\t\t#\n\t\t\tswitchport port-security aging type {absolute | inactivity}\t\t# get the time from calendar or the device uptime \t\t\n\n<\/pre><\/div>","protected":false},"excerpt":{"rendered":"Port Security is a network security feature restricting access to switch ports based on MAC addresses. It allows only specific devices to connect to a port, preventing unauthorized access and mitigating MAC flooding attacks. Administrators can configure limits on the number of MAC addresses per port and specify actions like shutdown, restrict, or protect in … Continue reading “0030_Cisco: Port Security”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"categories":[],"tags":[],"_links":{"self":[{"href":"https:\/\/itgen.itbumper.com\/index.php?rest_route=\/wp\/v2\/pages\/824"}],"collection":[{"href":"https:\/\/itgen.itbumper.com\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/itgen.itbumper.com\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/itgen.itbumper.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/itgen.itbumper.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=824"}],"version-history":[{"count":1,"href":"https:\/\/itgen.itbumper.com\/index.php?rest_route=\/wp\/v2\/pages\/824\/revisions"}],"predecessor-version":[{"id":825,"href":"https:\/\/itgen.itbumper.com\/index.php?rest_route=\/wp\/v2\/pages\/824\/revisions\/825"}],"wp:attachment":[{"href":"https:\/\/itgen.itbumper.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=824"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/itgen.itbumper.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=824"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/itgen.itbumper.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=824"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}