Cisco 4500M User Manual

32-6
Software Configuration Guide—Release 12.2(25)EW
OL-6696-01
Chapter 32 Configuring Port Security
Configuring Port Security
Switch#show port address
Secure Mac Address Table
------------------------------------------------------------------------
Vlan Mac Address Type Ports Remaining Age
(mins)
---- ----------- ---- ----- -------------
1 0000.0000.0001 SecureSticky Fa5/1 -
1 0000.0000.0002 SecureSticky Fa5/1 -
1 0000.0000.0003 SecureConfigured Fa5/1 -
------------------------------------------------------------------------
Total Addresses in System (excluding one mac per port) : 2
Max Addresses limit in System (excluding one mac per port) : 1024
Configuring Port Security Aging
You can use port security aging to set the aging time and aging type for all secure addresses on a port.
Use this feature to remove and add PCs on a secure port without manually deleting the existing secure
MAC addresses while still limiting the number of secure addresses on a port.
To configure port security aging, perform this task:
To disable port security aging for all secure addresses on a port, use the no switchport port-security
aging time interface configuration command.
This example shows how to set the aging time as 2 hours for the secure addresses on the Fast Ethernet
interface 5/1:
Switch(config)# interface fastethernet 5/1
Switch(config-if)# switchport port-security aging time 120
Command Purpose
Step 1
Switch(config)# interface interface_id
Enters interface configuration mode for the port on which
you want to enable port security aging.
Step 2
Switch(config-if)# switchport port-security
[ aging {static | time
aging_time | type
{absolute | inactivity} ]
Sets the aging time for the secure port.
The static keyword enables aging for statically
configured secure addresses on this port.
The time aging_time keyword specifies the aging time for
this port. Valid range for aging_time is from 0 to 1440
minutes. If the time is equal to 0, aging is disabled for this
port.
The type keyword sets the aging type as absolute or
inactive. For absolute aging, all the secure addresses on
this port ago out exactly after the time (minutes) specified
and are removed from the secure address list. For inactive
aging, the secure addresses on this port ago out only if
there is no data traffic from the secure source address for
the specified time period.
Step 3
Switch(config-if)# end
Returns to privileged EXEC mode.
Step 4
Switch# show port security [interface
interface_id ] [address]
Verifies your entries.

Cisco 4500M Specifications

General

Brand	Cisco
Model	4500M
Category	Network Router
Language	English