Cisco Systems 4500 Examples of Security Settings

43-28
Software Configuration Guide—Release 15.0(2)SG
OL-23818-01
Chapter 43 Configuring Port Security
Displaying Port Security Settings
To display traffic control information, perform one or more of these tasks:
Examples of Security Settings
The following examples are provided:
• Example 1: Displaying Security Settings for the Entire Switch, page 43-28
• Example 2: Displaying Security Settings for an Interface, page 43-29
• Example 3: Displaying All Secure Addresses for the Entire Switch, page 43-29
• Example 4: Displaying a Maximum Number of MAC Addresses on an Interface, page 43-30
• Example 5: Displaying Security Settings on an Interface for a VLAN Range, page 43-30
• Example 6: Displaying Secured MAC Addresses and Aging Information on an Interface, page 43-30
• Example 7: Displaying Secured MAC Addresses for a VLAN Range on an Interface, page 43-31
Example 1: Displaying Security Settings for the Entire Switch
This example shows how to display port security settings for the entire switch:
Switch# show port-security
Secure Port MaxSecureAddr CurrentAddr SecurityViolation Security Action
(Count) (Count) (Count)
---------------------------------------------------------------------------
Fa3/1 2 2 0 Restrict
Fa3/2 2 2 0 Restrict
Fa3/3 2 2 0 Shutdown
Fa3/4 2 2 0 Shutdown
Fa3/5 2 2 0 Shutdown
Command Purpose
Switch# show interface status err-disable Displays interfaces that have been error-disabled along with
the cause for which they were disabled.
Switch# show port-security [interface interface_id |
interface port_channel port_channel_number] Displays port security settings for the switch or for the
specified interface, including the maximum allowed number
of secure MAC addresses for each interface, the number of
secure MAC addresses on the interface, the number of
security violations that have occurred, and the violation
mode.
The interface can be a port channel logical interface.
Switch# show port-security [interface interface_id |
interface port_channel port_channel_number] address Displays all secure MAC addresses configured on all switch
interfaces or on a specified interface with aging information
for each address.
Switch# show port-security [interface interface_id |
interface port_channel port_channel_number] vlan
vlan_list
Displays the maximum allowed number of secure MAC
addresses and the current number of secure MAC addresses
on a specific VLAN-list and a specific interface.
Switch# show port-security [interface interface_id |
interface port_channel port_channel_number] [address
[vlan vlan_list]]
Displays all secure MAC addresses configured on a specific
VLAN-list and a specific interface.