Port Security配置(set commands).pdfVIP

C H A P T E R 18 Configuring Port Security This chapter describes how to configure port security on the Catalyst enterprise LAN switches. Note For complete syntax and usage information for the commands used in this chapter, refer to the Command Reference publication for your switch. This chapter consists of these sections: • Understanding How Port Security Works, 1 • Port Security Configuration Guidelines, 2 • Configuring Port Security, 2 Understanding How Port Security Works You can use port security to block input to an Ethernet, Fast Ethernet, or Gigabit Ethernet port when the Media Access Control (MAC) address of the station attempting to access the port is different from any of the MAC addresses specified for that port. The global resource for the system is 1024 MAC addresses. In addition to this global resource space, there is space for one default MAC address per port to be secured. The total number of MAC addresses that can be specified per port is limited to the global resource of 1024 plus one default MAC address. The total number of MAC addresses on any port cannot exceed 1025. Allocation of the maximum number of MAC addresses for each port depends on your network configuration. The following combinations are examples of valid allocations: • 1025 (1+1024) addresses on one port and 1 address each on the rest of the ports. • 513 (1+512) each on 2 ports in a system and 1 address each