Developers guide

Chapter 6

Configuration by example 39

snmp-server enable traps port-security

snmp-server enable traps port-security trap-rate 1

snmp-server host 192.168.1.5 version 2c public port-security

On each interface, you need to initialize the port security by authorizing a fake MAC address with the

following commands

switchport access vlan 4

switchport port-security

switchport port-security maximum 2

switchport port-security maximum 1 vlan access

switchport port-security violation restrict

switchport port-security mac-address 0200.0000.00xx

where xx stands for the interface index.

Note

Don’t forget to update the startup-config.

switches.conf

Note

You can use the Web Administration interface instead of performing the configuration

in the flat files.

Here is the /usr/local/pf/conf/switches.conf file for our setup. See Network Device Definition for

more information about the content of this file.