|
Securing an internetwork is an
important responsibility for a network administrator. Access layer
switchports are accessible through the structured cabling at wall
outlets in offices and rooms. Anyone can plug in a PC or laptop into one
of these outlets. This is a potential entry point to the network by
unauthorized users. Switches provide a feature called port security. It
is possible to limit the number of addresses that can be learned on an
interface. The switch can be configured to take an action if this is
exceeded. 
Secure MAC addresses can be set statically. However, securing MAC
addresses statically can be a complex task and prone to error.
An alternative approach is to set port
security on a switch interface. The number of MAC address per port can
be limited to 1. The first address dynamically learned by
the switch becomes the secure address.
To reverse port security on an interface
use the
no
form of the command.
To verify port security status the
command
show port security
is entered.
| |
Lab Activity
Lab Exercise: Configuring Port Security
In this lab, the student will
create and verify a basic switch configuration.
|
|
|
| |
Lab Activity
e-Lab Activity: Configuring Port Security
In this lab, the student will set port security for ports on the switch.
|
|
|
Web Links