22-14
Cisco ME 3400 Ethernet Access Switch Software Configuration Guide
OL-9639-06
Chapter 22 Configuring Port-Based Traffic Control
Configuring Port Security
To return the interface to the default condition as not a secure port, use the no switchport port-security
interface configuration command. If you enter this command when sticky learning is enabled, the sticky
secure addresses remain part of the running configuration but are removed from the address table. All
addresses are now dynamically learned.
To return the interface to the default number of secure MAC addresses, use the no switchport
port-security maximum value interface configuration command. To return the violation mode to the
default condition (shutdown mode), use the no switchport port-security violation {protocol | restrict}
interface configuration command.
Step 8 switchport port-security
[mac-address mac-address [vlan
{vlan-id | {access}}]
(Optional) Enter a secure MAC address for the interface. You can use this
command to enter the maximum number of secure MAC addresses. If you
configure fewer secure MAC addresses than the maximum, the remaining
MAC addresses are dynamically learned.
Note If you enable sticky learning after you enter this command, the secure
addresses that were dynamically learned are converted to sticky
secure MAC addresses and are added to the running configuration.
(Optional) vlan—set a per-VLAN maximum value.
Enter one of these options after you enter the vlan keyword:
• vlan-id—On a trunk port, you can specify the VLAN ID and the MAC
address. If you do not specify a VLAN ID, the native VLAN is used.
• access—On an access port, specify the VLAN as an access VLAN.
Step 9 switchport port-security
mac-address sticky (Optional) Enable sticky learning on the interface.
Step 10 switchport port-security
mac-address sticky [mac-address |
vlan {vlan-id | {access}]
(Optional) Enter a sticky secure MAC address, repeating the command as
many times as necessary. If you configure fewer secure MAC addresses than
the maximum, the remaining MAC addresses are dynamically learned, are
converted to sticky secure MAC addresses, and are added to the running
configuration.
Note If you do not enable sticky learning before this command is entered,
an error message appears, and you cannot enter a sticky secure MAC
address.
(Optional) vlan—set a per-VLAN maximum value.
Enter one of these options after you enter the vlan keyword:
• vlan-id—On a trunk port, you can specify the VLAN ID and the MAC
address. If you do not specify a VLAN ID, the native VLAN is used.
• access—On an access port, specify the VLAN as an access VLAN.
Step 11 end Return to privileged EXEC mode.
Step 12 show port-security Verify your entries.
Step 13 copy running-config
startup-config (Optional) Save your entries in the configuration file.
Command Purpose