In this lesson, you will learn how to configure port security to restrict the number of MAC addresses per port, specify which MAC addresses are allowed, and control what happens when violations occur. To understand port security, you should be familiar with how switches learn MAC. Which means to security architecture must implement with different layers of security levels such that firewalls, intrusion preventing system, antivirus and antimalware tools for end user devices, IP access control lists to filter packets on routers and there are many more. The maximum number of secure MAC addresses that you can configure on a switch is set by the maximum number of available MAC addresses allowed in the. To block unauthorized access to switch ports, switches support a feature called port security. This tutorial explains. On Cisco Catalyst switches, port security is a per-interface feature that enforces a limit and a list of allowed MAC addresses. If a device connects and its MAC is allowed, all good. This can be a security risk when users connect.
[PDF Version]
How to Configure Port Security
To configure port security we need to access the command prompt of switch. Click Switch and click CLI and press Enter Key.Port can be secure from i...
Switchport Port-Security Violation
We need to specify what action; it should take in security violation. Three possible modes are available:Protect: - This mode will only work with s...
Switchport Port Security Example
In our topology PC0 is connected with F0/1 port of switch. Enter following commands to secure F0/1 port.Following table explains above commands in...
Switchport Port Security Testing
In our topology we have one additional PC. Assume that, this is the cracker's PC. To gain unauthorized access in network he unplugged the Ethernet...