43-27
Software Configuration Guide—Release 15.0(2)SG
OL-23818-01
Chapter 43 Configuring Port Security Displaying Port Security Settings
Total Addresses in System (excluding one mac per port) : 5
Max Addresses limit in System (excluding one mac per port) : 3072
Switch# show running-config interface fastEthernet 5/1
Building configuration...
Current configuration : 344 bytes
!
interface FastEthernet5/1
switchport mode access
switchport voice vlan 3
switchport port-security
switchport port-security maximum 3072
switchport port-security maximum 5 vlan voice
switchport port-security mac-address sticky
switchport port-security mac-address sticky 0000.0000.0001
switchport port-security mac-address sticky 0000.0000.0002
switchport port-security mac-address sticky 0000.0000.0003
switchport port-security mac-address sticky 0000.0000.0004 vlan voice
switchport port-security mac-address sticky 0000.0000.0005
switchport port-security mac-address sticky 0000.0000.0b0b vlan voice
end
Switch#

Voice Port Security Configuration Guidelines and Restrictions

Note Port security as implemented on voice ports functions the same as port security on access ports.
When using (or configuring) voice port security, consider these guidelines and restrictions:
You can configure sticky port security on voice ports. If sticky port security is enabled on a voice
port, addresses secured on data and voice VLANs are secured as sticky addresses.
You can configure maximum secure addresses per-VLAN. You can set a maximum for either the
data VLAN or the voice VLAN. You can also set a maximum per-port, just as with access ports.
You can configure port security MAC addresses on a per-VLAN basis on either the data or voice
VLANs.
Prior to Cisco IOS Release 12.2(31)SG, you required three MAC addresses as the maximum
parameter to support an IP phone and a PC. With Cisco IOS Release 12.2(31)SG and later releases,
the maximum parameter must be configured to two, one for the phone and one for the PC.
Displaying Port Security Settings
Use the show port-security command to display port security settings for an interface or for the switch.