User's Manual

189
Users Manual of CS-6306R
Configuring the Secure Port 11.3
11.3.1 Configuring the Secure Port Mode
There are two static secure port modes: accept and reject. If it is the accept mode, only the flow whose
source address is same to the local MAC address can be received by the port for communication. If it is the
reject mode, only the flow whose source address is different to the local MAC address can be received by the
port.
Run the following commands in EXEC mode to enable or disable the secure port function:
Command Purpose
configure
Enters the global configuration mode.
interface g0/1
Enters the to-be-configured port.
[no] switchport port-security
mode static {accept | reject}
Configures the secure port mode.
exit
Goes back to the global configuration mode.
exit
Goes back to the EXEC mode.
write
Saves the configuration.
11.3.2 Configuring the Static MAC Address of the Secure Port
After you configure the static MAC address of the secure port, In accept mode, the flow whose source
address is same to the local MAC address can be received by the port for communication. In reject mode, the
flow whose source address is different to the local MAC address can be received by the port.
Run the following commands in EXEC modeto configure the static MAC address of the secure port:
Command Purpose
configure
Enters the global configuration mode.
interface g0/1
Enters the to-be-configured port.
[no] switchport port-security
static mac-address mac-addr
Adds or deletes the static MAC address of the
secure port.
● mac-addris the configured MAC address.
exit
Goes back to the global configuration mode.
exit
Goes back to the EXEC mode.
write
Saves the configuration.