User Manual UMN:CLIV5812G1797.10 Port SecurityYou can use the port security feature to restrict input to an interface by limiting andidentifying MAC addresses of the PCs that are allowed to access the port. When youassign secure MAC addresses to a secure port, the port does not forward packets withsource addresses outside the group of defined addresses. If you limit the number ofsecure MAC addresses to one and assign a single secure MAC address, the PC attachedto that port is assured the full bandwidth of the port.7.10.1 Port Security on PortStep 1 Enable port security on the port.Command Mode Descriptionport security PORTS Bridge Enables port security on the port.Step 2 Set the maximum number of secure MAC addresses for the port.Command Mode Descriptionport security PORTS maximum<1-16384> Bridge Sets the maximum number of secure MAC addressesfor the port. (default: 1)Step 3 Set the violation mode and the action to be taken.Command Mode Descriptionport security PORTS violation{shutdown | protect | restrict} Bridge Selects a violation mode.(default: shutdown)When configuring port security, note that the following information about port securityviolation modes:• protect drops packets with unknown source addresses until you remove a sufficientnumber of secure MAC addresses to drop below the maximum value.• restrict drops packets with unknown source addresses until you remove a sufficientnumber of secure MAC addresses to drop below the maximum value and causes theSecurity Violation counter to increment.• shutdown puts the interface into the error-disabled state immediately and sends anSNMP trap notification.Step 4 Enter a secure MAC address for the port.Command Mode Descriptionport security PORTS mac-address MAC-ADDR vlan NAME Bridge Sets a secure MAC address for the port.
