Specifications

2-427
Catalyst 4500 Se ries S wit ch C is co IO S C om mand R efer ence —Re lease I OS XE 3 .3.0 XO(1 5.1 (1)XO)
OL_28738 -01
Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
port-security maximum
port-security m aximum
To configure the maximum number of addresse s on an interface for a specif ic VLAN or VLAN range,
use the port-security maximum command.
port-sec uri ty maximum ma x_value
Syntax Description
Command Modes VLAN-range inte rface submode
Usage Guidelines Layer 2 interfaces can be part of multiple VLANs (for example, a typical trunk port). In conjunction with
the vlan command, you can use the port-security maximum command to specify the maximum number
of secure addresses on different VLANs.
If a specific VLAN on a port is not configured with a maximum value, the maximum configured for the
port is used for that VLAN. In this situation, the maximum number of addresses that can be secured on
this VLAN is limited to the maximum value configured on the port.
Each VLAN can be confi gured with a maximum c ount tha t is g reater than t he value configur ed on th e
port. Also, the sum total of the maximum configured values for all the VLANs can exceed the maximum
configured for the port. In either of these situations, the number of MAC addresses secured on each
VLAN is limited to the lesser of the VLAN configuration maximum and the port configuration
maximum.
Examples This example shows how to configure a maximum numb er of addresses (5) on inter face
Gigabit Ethernet 1/1 for VLANs 2-3:
Switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)# interface g1/1
Switch(config-if)# switchport trunk encapsulation dot1q
Switch(config-if)# switchport mode trunk
Switch(config-if)# vlan 2-3
Switch(config-if-vlan-range)# port-security maximum 5
Switch(config-if-vlan-range)# exit
Switch#
Related Commands
max_value The maximum number of MAC-addresses.
Command Description
port-sec urit y mac-a ddres s Configures a secure address on an interface for a specific VLAN
or VLAN range.
port-security mac-address
sticky
Configures a sticky address on an interface for a specific VLAN
or VLAN range.