the port cannot be part of a Etherchannel port group.the port must not have any static MAC address already configured.the port to be configured must be an static access port (not in dynamic desirable mode which is the default state on most Cisco switches).By default, port security is turned off on all interfaces.īefore we start configuring port-security we must meet the following conditions:
#CISCO MAC ADDRESS ASSIGNED TO PORT FULL#
If you limit the number of secure MAC addresses to one and assign a single secure MAC address, the workstation attached to that port is assured the full bandwidth of the port. To resolve this issue the port must be re-enabled manually by the network administrator or automatically after a period of time if the errdisable cause is configured for automatic recovery (by default after 300 seconds). In this case the port will be shut down or the packets arriving on that port will be dropped with a specific action. Suppose a user tries to connect to a port which has port security enabled and his MAC address does not appear on the list of allowed MAC addresses. Using this feature only predefined static MAC addresses or limited number of dynamic MAC addresses can access the network. In most cases network administrators use this to secure access to the physical network. Port security is a feature used on Cisco Catalyst switches which limits the MAC addresses allowed to appear on a specific port. In some environments, a network must be secured by controlling what stations can gain access to the network itself.
0 kommentar(er)
