Cisco 7604 User Manual

47-12
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Chapter 47 Configuring Port Security
Configuring Port Security
Configuring Secure MAC Address Aging on a Port
When the aging type is configured with the absolute keyword, all the dynamically learned secure
addresses age out when the aging time expires. When the aging type is configured with the inactivity
keyword, the aging time defines the period of inactivity after which all the dynamically learned secure
addresses age out.
Note Static secure MAC addresses and sticky secure MAC addresses do not age out.
These sections describe how to configure secure MAC address aging on a port:
• Configuring the Secure MAC Address Aging Type on a Port, page 47-12
• Configuring Secure MAC Address Aging Time on a Port, page 47-13
Configuring the Secure MAC Address Aging Type on a Port
With a PFC3 and Release 12.2(18)SXE and later releases, you can configure the secure MAC address
aging type on a port. With a PFC2, you cannot configure the secure MAC address aging type. The PFC2
supports only absolute aging.
To configure the secure MAC address aging type on a port, perform this task:
This example shows how to set the aging type to inactivity on Fast Ethernet Port 5/12:
Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)# interface fastethernet 5/12
Router(config-if)# switchport port-security aging type inactivity
Router(config-if)# do show port-security interface fastethernet 5/12 | include Type
Aging Type : Inactivity
Command Purpose
Step 1
Router(config)# interface type
1
slot/port
1. type = ethernet, fastethernet, gigabitethernet, or tengigabitethernet
Selects the LAN port to configure.
Step 2
Router(config-if)# switchport port-security aging
type {absolute | inactivity}
Configures the secure MAC address aging type on the
port (default is absolute).
Router(config-if)# no switchport port-security
aging type
Reverts to the default MAC address aging type.
Step 3
Router(config-if)# do show port-security
interface
type
1
slot/port | include Time
Verifies the configuration.

Cisco 7604 Specifications

General

Brand	Cisco
Model	7604
Category	Network Router
Language	English