47-9
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Chapter 47 Configuring Port Security
Configuring Port Security
Configuring the Maximum Number of Secure MAC Addresses on a Port
To configure the maximum number of secure MAC addresses on a port, perform this task:
When configuring the maximum number of secure MAC addresses on a port, note the following
information:
• With Release 12.2(18)SXE and later releases, the range for number_of_addresses is 1 to 4,097.
• With releases earlier than Release 12.2(18)SXE, the range for number_of_addresses is 1 to 1,024.
• With Release 12.2(18)SXE and later releases, port security supports trunks.
–
On a trunk, you can configure the maximum number of secure MAC addresses both on the trunk
and for all the VLANs on the trunk.
–
You can configure the maximum number of secure MAC addresses on a single VLAN or a range
of VLANs.
–
For a range of VLANs, enter a dash-separated pair of VLAN numbers.
–
You can enter a comma-separated list of VLAN numbers and dash-separated pairs of VLAN
numbers.
This example shows how to configure a maximum of 64 secure MAC addresses on Fast Ethernet
port 5/12:
Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)# interface fastethernet 3/12
Router(config-if)# switchport port-security maximum 64
Router(config-if)# do show port-security interface fastethernet 5/12 | include Maximum
Maximum MAC Addresses : 64
Command Purpose
Step 1
Router(config)# interface
type
1
slot/port
1. type = ethernet, fastethernet, gigabitethernet, or tengigabitethernet
Selects the LAN port to configure.
Step 2
Router(config-if)# switchport port-security
maximum
number_of_addresses
vlan
{
vlan_ID
|
vlan_range
}
Sets the maximum number of secure MAC addresses for
the port (default is 1).
Note Per-VLAN configuration is supported only on
trunks.
Router(config-if)# no switchport port-security
maximum
Reverts to the default configuration.
Step 3
Router(config-if)# do show port-security
interface
type
1
slot/port
| include Maximum
Verifies the configuration.