SGS-6341-Series User Manual

15-49
VLAN, both of them will violate
the security of the MAC
address.
switchport port-security aging {static | time <value>
| type {absolute | inactivity}}
no switchport port-security violation aging {static |
time | type}
Enable port-security aging
entry of the interface, specify
aging time or aging type.
Admin Mode
clear port-security {all | configured | dynamic |
sticky} [[address <mac-addr> | interface
<interface-id>] [vlan <vlan-id> ]]
Clear the secure MAC entry of
the interface.
show port-security [interface <interface-id>]
[address | vlan]
Show port-security
configuration.
15.3 Example of PORT SECURITY
Internet
Figure 15-1: Typica
l topology chart for port security
When the interface enabl
es Port security function, configure the maximum number of the
secure MAC addresses allowed by an interface to be 10, the interface allows 10 users to
access the internet at most. If it exceeds the maximum number, the new user cannot access
the internet, so that it not only limits the user’s number but also accesses the internet safely. If
configuring the maximum number of the secure MAC addresses as 1, only HOST A or HOST B
is able to access the internet.
Configuration process:
#Configure the switch.
Switch(config)#interface Ethernet 1/1
Switch(config-if-ethernet1/1)#switchport port-security
Switch(config-if- ethernet1/1)#switchport port-security maximum 10
Switch(config-if- ethernet1/1)#exit
Switch(config)#
User’s Manual of SGS-6341 series