Scribd Logo
Upload

Welcome to Scribd!

  • 27 views

    Port Security & Switchport Redundant

    Uploaded by

    Nguyễn Phạm Hoàng
    Port security allows switches to limit access at switch ports by learning MAC addresses of connected devices and preventing unauthorized devices from transmitting traffic. The document discusses various port security configurations including shutdown on violation, restrict on violation, protect on violation, sticky and static MAC address configuration, and clearing sticky addresses. Default settings remove port security from interfaces.

    Copyright:

    © All Rights Reserved
    Download as PPTX, PDF, TXT or read online from Scribd
    Flag for inappropriate content

    You might also like

    Port Security & Switchport Redundant

    Uploaded by

    Nguyễn Phạm Hoàng
    27 views16 pages
    Port security allows switches to limit access at switch ports by learning MAC addresses of connected devices and preventing unauthorized devices from transmitting traffic. The document discusses various port security configurations including shutdown on violation, restrict on violation, protect on violation, sticky and static MAC address configuration, and clearing sticky addresses. Default settings remove port security from interfaces.

    Original Description:

    CCNA port security

    Original Title

    12. Port Security

    Copyright

    © © All Rights Reserved

    Available Formats

    PPTX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    Port security allows switches to limit access at switch ports by learning MAC addresses of connected devices and preventing unauthorized devices from transmitting traffic. The document discusses various port security configurations including shutdown on violation, restrict on violation, protect on violation, sticky and static MAC address configuration, and clearing sticky addresses. Default settings remove port security from interfaces.

    Copyright:

    © All Rights Reserved
    Download as PPTX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pptx, pdf, or txt
    27 views16 pages

    Port Security & Switchport Redundant

    Uploaded by

    Nguyễn Phạm Hoàng
    Port security allows switches to limit access at switch ports by learning MAC addresses of connected devices and preventing unauthorized devices from transmitting traffic. The document discusses various port security configurations including shutdown on violation, restrict on violation, protect on violation, sticky and static MAC address configuration, and clearing sticky addresses. Default settings remove port security from interfaces.

    Copyright:

    © All Rights Reserved
    Download as PPTX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pptx, pdf, or txt
    of 16

    Port Security & Switchport redundant

    Port Security

    Internet
    Network

    F
    Packet A F Packet B F
    f0/4
    A Sw1 B
    f0/3
    F

    F
    Attacker
    C Hyenae
    Port Security: Violation Shutdown

    Sw1# show interface f0/1 status


    Port Name Status Vlan Duplex Speed Type
    Fa0/1 err-disabled 1 full 100 100BaseTX

    A f0/1
    errdisable recovery cause psecure-violation
    0800.1000.AAAA up errdisable recovery interval 30
    0800.1000.BBBB down
    Hyenae
    interface f0/1 interface f0/1
    shutdown switchport mode access
    no shutdown switchport port-security
    switchport port-security maximum 1
    switchport port-security violation shutdown
    switchport port-security mac-address 0800.1000.AAAA
    Port Security: Violation Restrict
    syslog %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred,
    caused by MAC address 0800.1000.BBBB on port FastEthernet0/1.

    Sw1# show interface f0/1 status


    Port Name Status Vlan Duplex Speed Type
    Fa0/1 connected 1 full 100 100BaseTX

    A f0/1

    0800.1000.AAAA up
    0800.1000.BBBB up
    Hyenae
    interface f0/1
    switchport mode access
    switchport port-security
    switchport port-security maximum 1
    switchport port-security violation restrict
    switchport port-security mac-address 0800.1000.AAAA
    Port Security: Violation Restrict
    Switch# show port-security
    Secure Port MaxSecureAddr CurrentAddr SecurityViolation Security Action
    (Count) (Count) (Count)
    ---------------------------------------------------------------------------
    F0/1 1 1 12 Restrict

    A f0/1

    0800.1000.AAAA up
    0800.1000.BBBB up
    Hyenae
    interface f0/1
    switchport mode access
    switchport port-security
    switchport port-security maximum 1
    switchport port-security violation restrict
    switchport port-security mac-address 0800.1000.AAAA
    Port Security: Violation Protect
    %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred,
    caused by MAC address 0800.1000.BBBB on port FastEthernet0/1.

    Sw1# show interface f0/1 status


    Port Name Status Vlan Duplex Speed Type
    Fa0/1 connected 1 full 100 100BaseTX

    A f0/1

    0800.1000.AAAA up
    0800.1000.BBBB up
    Hyenae
    interface f0/1
    switchport mode access
    switchport port-security
    switchport port-security maximum 1
    switchport port-security violation protect
    switchport port-security mac-address 0800.1000.AAAA
    Port Security

    Sw# show interface status err-disabled


    Port Name Status Reason
    Fa0/1 err-disabled port-
    security
    Switch# show port-security interface f0/1
    Port Security              : Enabled
    Port Status                : Secure-up
    Violation Mode             : Shutdown
    Aging Time                 : 20 mins
    Aging Type                 : Absolute
    SecureStatic Address Aging : Disabled
    Maximum MAC Addresses      : 1
    Total MAC Addresses        : 1
    Configured MAC Addresses   : 0
    Sticky MAC Addresses       : 0
    Last Source Address        : 0000.0000.0000
    Security Violation Count   : 0

    Switch# show running-config interface f0/1


    Port Security
    Sw2# show port-security address
    -----------------------------------------------------------------
    Vlan Mac Address Type Ports Remaining Age
    ---- ----------- ---- ----- -------------
    1 0800.1000.AAAA SecureConfigured F0/2 -
    1 0800.1000.BBBB SecureConfigured F0/2 -

    A
    Sw1 f0/2 Sw2

    interface f0/2
    switchport mode access
    switchport port-security
    switchport port-security maximum 2
    switchport port-security violation shutdown
    switchport port-security mac-address 0800.1000.AAAA

    switchport port-security mac-address 0800.1000.BBBB


    Port Security
    Sw2# show port-security address
    -----------------------------------------------------------------
    Vlan Mac Address Type Ports Remaining Age
    ---- ----------- ---- ----- -------------
    1 0800.1000.AAAA SecureSticky F0/2 -
    1 0800.1000.BBBB SecureSticky F0/2 -

    A
    Sw1 f0/2 Sw2

    interface f0/2
    switchport mode access
    switchport port-security
    switchport port-security maximum 2
    switchport port-security violation shutdown
    switchport port-security mac-address sticky
    Sw2# clear port-security sticky interface f0/2
    Port Security
    Sw2# show port-security address
    -----------------------------------------------------------------
    Vlan Mac Address Type Ports Remaining Age
    ---- ----------- ---- ----- -------------
    1 0800.1000.AAAA SecureSticky F0/2 -
    1 0800.1000.BBBB SecureConfigured F0/2 -

    A
    Sw1 f0/2 Sw2

    interface f0/2
    switchport mode access
    switchport port-security
    switchport port-security maximum 2
    switchport port-security violation shutdown
    switchport port-security mac-address sticky
    switchport port-security mac-address 0800.1000.BBBB
    Port Security

    default interface f0/2

    interface f0/2
    switchport mode access
    no switchport port-security
    no switchport port-security maximum 2
    no switchport port-security violation shutdown
    no switchport port-security mac-address sticky
    no switchport port-security mac-address 0800.1000.BBBB

    interface f0/2
    switchport mode access
    switchport port-security
    switchport port-security maximum 2
    switchport port-security violation shutdown
    switchport port-security mac-address sticky
    switchport port-security mac-address 0800.1000.BBBB

    You might also like