交换的端口安全.doc

交换的端口安全 Switch Switchen Switch#conf t Switch(config)#no ip domain-lo Switch(config)#line console 0 Switch(config-line)#no exec-timeout Switch(config-line)#logg sy Switch(config-line)#end Switch# 端口安全： Switch#conf t Switch(config)#int f0/21 Switch(config-if)#switchport mode access 设定端口为接入模式 Switch(config-if)#switchport port-security 打开端口安全 Switch(config-if)#switchport port-security ? aging Port-security aging commands mac-address Secure mac address maximum Max secure addresses violation Security violation mode cr Switch(config-if)#switchport port-security aging ? 设定端口安全的时间 static Enable aging for configured secure addresses 一直存活 time Port-security aging time 手工设定 type Port-security aging type Switch(config-if)#switchport port-security aging static Switch(config-if)#switchport port-security aging time ? 1-1440 Aging time in minutes. Enter a value between 1 and 1440 Switch(config-if)#switchport port-security aging time 100 Switch(config-if)#switchport port-security maximum ? 设定最大mac 数 1-5120 Maximum addresses Switch(config-if)#switchport port-security maximum 5 Switch(config-if)#switchport port-security violation ? 设定一些行为 protect Security violation protect mode restrict Security violation restrict mode shutdown Security violation shutdown mode Switch(config-if)#switchport port-security violation shutdown Switch(config-if)#end Switch#show port-security 查看端口行为 Secure Port MaxSecureAddr CurrentAddr SecurityViolation Security Action (Count) (Count) (Count) --------------------------------------------------------------------------- Fa0/21 5 0 1 Shutdown --------------------------------------------------------------------------- Total Addresses in System (excluding one mac per port) : 0 Max Addresses limit in System (excluding one mac per port) : 51