CLI Reference Guide-R01

Chapter 9 | General Security Measures
Port Security
– 287 –
Example
The following example enables port security for port 5, and sets the response to a
security violation to issue a trap message:
Console(config)#interface ethernet 1/5
Console(config-if)#port security action trap
Related Commands
show interfaces status (412)
shutdown (403)
mac-address-table static (484)
port security
mac-address sticky
Use this command to save the MAC addresses that port security has learned as
“sticky” entries.
Syntax
port security mac-address sticky
Command Mode
Interface Configuration
Command Usage
◆ Sticky MAC addresses that port security has learned are dynamic addresses that
cannot be moved to another port.
◆ If sticky MAC addresses are received on another secure port, then the port
intrusion action is taken.
Example
Console(config-if)#port security mac-address sticky
Console#
port security
mac-address-as-
permanent
Use this command to save the MAC addresses that port security has learned as
static entries.
Syntax
port security mac-address-as-permanent [interface interface]
interface - Specifies a port interface.
ethernet unit/port
unit - Unit identifier. (Range: 1)
port - Port number. (Range: 1-28)