32-3
Software Configuration Guide—Release 12.2(25)EW
OL-6696-01
Chapter 32 Configuring Port Security
Default Port Security Configuration
Default Port Security Configuration
Table 32-1 shows the default port security configuration for an interface.
Port Security Guidelines and Restrictions
Follow these guidelines when configuring port security:
• A secure port cannot be a trunk port.
• A secure port cannot be a destination port for Switch Port Analyzer (SPAN).
• A secure port cannot belong to an EtherChannel port-channel interface.
• A secure port and static MAC address configuration are mutually exclusive.
Configuring Port Security
These sections describe how to configure port security:
• Configuring Port Security on an Interface, page 32-4
• Configuring Port Security Aging, page 32-6
Table 32-1 Default Port Security Configuration
Feature Default Setting
Port security Disabled on a port
Maximum number of secure MAC addresses 1
Violation mode Shutdown. The port shuts down when the maximum
number of secure MAC addresses is exceeded, and an
SNMP trap notification is sent.
Aging Disabled
Aging type Absolute
Static Aging Disabled
Sticky Disabled