{"id":2528,"date":"2012-06-04T23:47:26","date_gmt":"2012-06-04T15:47:26","guid":{"rendered":"http:\/\/blog.pmail.idv.tw\/?p=2528"},"modified":"2012-06-04T23:47:26","modified_gmt":"2012-06-04T15:47:26","slug":"cisco-port-security","status":"publish","type":"post","link":"https:\/\/blog.pmail.idv.tw\/?p=2528","title":{"rendered":"Cisco Port Security"},"content":{"rendered":"<p>cisco port security \u53ef\u4ee5\u9650\u5236port \u7d00\u9304 mac address \u7684\u6578\u91cf,\u53ef\u4ee5\u61c9\u7528\u5728\u4f01\u696d\u74b0\u5883\u4e2d\u907f\u514d<\/p>\n<p>\u4e0d\u5c6c\u65bc\u4f01\u696d\u7684\u8a2d\u5099\u9023\u4e0a\u5167\u90e8\u7db2\u8def<\/p>\n<p><!--more--><\/p>\n<p>LAB :<\/p>\n<p>\u9700\u9054\u6210\u76ee\u6a19<\/p>\n<p>\u8a2d\u5b9a fa0\/1 \u53ea\u8a18\u9304\u4e00\u500bmac address<\/p>\n<p>\u7576NB \u63a5\u4e0afa0\/1 \u6703\u7121\u6cd5ping \u5230192.168.1.200<\/p>\n<p><a href=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/06\/portsecurity1.png\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px\" title=\"portsecurity1\" border=\"0\" alt=\"portsecurity1\" src=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/06\/portsecurity1_thumb.png\" width=\"244\" height=\"215\"><\/a><\/p>\n<p>\u4ee5\u4e0a\u9700\u6c42\u53ef\u4ee5\u5728fa0\/1 \u4e0b\u9054port security \u76f8\u95dc\u6307\u4ee4\u9054\u6210\u76ee\u6a19<\/p>\n<p>\u76f8\u95dc\u6307\u4ee4(\u7d05\u8272\u90e8\u5206)<\/p>\n<p>Switch(config)#interface f0\/1<br \/>Switch(config-if)#switchport mode access <br \/><font color=\"#ff0000\">Switch(config-if)#switchport port-security <br \/>Switch(config-if)#switchport port-security mac-address sticky <br \/>Switch(config-if)#switchport port-security maximum 1<br \/>Switch(config-if)#switchport port-security violation shutdown<\/font> <\/p>\n<p>switchport port-security&nbsp; : \u8a72port \u555f\u52d5port security<\/p>\n<p>switchport port-security mac-address sticky : \u81ea\u52d5\u5b78\u7fd2mac \u4e0d\u9808\u624b\u52d5\u8f38\u5165<\/p>\n<p>switchport port-security maximum 1 :\u53ea\u8a18\u9304\u4e00\u500bmac address<\/p>\n<p>switchport port-security violation shutdown : \u5075\u6e2c\u5230\u4e0d\u9069\u7d00\u9304\u7684mac address \u5c31\u95dc\u9589\u8a72port<\/p>\n<p>\u67e5\u8a62\u6307\u4ee4<\/p>\n<p><strong><font color=\"#ff0000\">show port-security<\/font><\/strong> <\/p>\n<p>Secure Port MaxSecureAddr CurrentAddr SecurityViolation Security Action<br \/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; (Count)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; (Count)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; (Count)<br \/>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;<br \/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fa0\/1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Shutdown<br \/>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<\/p>\n<p><font color=\"#ff0000\"><strong>show port-security address&nbsp;&nbsp; (\u67e5\u8a62\u5df2\u7d93\u7d00\u9304\u7684\u5408\u6cd5mac accress)<\/strong><\/font><\/p>\n<p>Secure Mac Address Table<br \/>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br \/>Vlan&nbsp;&nbsp;&nbsp; Mac Address&nbsp;&nbsp;&nbsp; Type&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Ports&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Remaining Age<br \/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; (mins)<br \/>&#8212;-&nbsp;&nbsp;&nbsp; &#8212;&#8212;&#8212;&#8211;&nbsp;&nbsp;&nbsp; &#8212;-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8212;&#8211;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8212;&#8212;&#8212;&#8212;-<br \/>1&nbsp;&nbsp;&nbsp; 0060.5C7A.64D4&nbsp;&nbsp;&nbsp; SecureSticky&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; FastEthernet0\/1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8211;<br \/>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;<\/p>\n<p><a href=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/06\/portsecurity2.png\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px\" title=\"portsecurity2\" border=\"0\" alt=\"portsecurity2\" src=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/06\/portsecurity2_thumb.png\" width=\"244\" height=\"103\"><\/a><\/p>\n<p>\u7576NB\u63a5\u4e0a fa0\/1 \u6703\u770b\u5230port\u6703\u81ea\u52d5shutdown<\/p>\n<p>\u67e5\u770b\u8a72\u4ecb\u9762\u6703\u986f\u793a<\/p>\n<p>Switch#sh interfaces fastEthernet 0\/1<br \/><font color=\"#ff0000\"><strong>FastEthernet0\/1 is down, line protocol is down (err-disabled)<\/strong><\/font><\/p>\n<p>Note:<\/p>\n<p>1.NB\u63a5\u4e0a\u5f8cport \u88abshutdown \u5982\u679c\u5c07PC \u53c8\u63a5\u56de\u8a72port\u6b64\u6642\u9084\u662f\u9700\u8981\u7531\u7ba1\u7406\u54e1\u624b\u52d5\u5c07port, shutdown &amp; no shutdown&nbsp; (\u56e0\u70baerr-disabled \u8a0a\u606f)<\/p>\n<p>2. \u5982\u679c\u8981\u8b93\u6b63\u5e38pc \u63a5\u56de\u5f8c\u53ef\u4ee5\u81ea\u52d5\u6062\u5fa9\u53ef\u4f7f\u7528\u4e0b\u5217\u6307\u4ee4<\/p>\n<ul>\n<li>&nbsp; switchport port-security violation restrict (\u6709\u9055\u898f\u901a\u77e5\u8a0a\u606f\uff0c\u6703\u7d2f\u52a0\u6b21\u6578\u7d71\u8a08)<\/li>\n<li>&nbsp; switchport port-security violation portect (\u7121\u9055\u898f\u901a\u77e5\u8a0a\u606f\uff0c\u4e0d\u7d2f\u52a0\u6b21\u6578\u7d71\u8a08)\n<\/li>\n<\/ul>\n<p>3. \u6e05\u9664 port-security mac address \u6307\u4ee4&nbsp; &#8211;&gt; <strong><font color=\"#ff0000\">clear port-security stick address&nbsp; xxxxx<\/font><\/strong><\/p>\n<div class=\"21cd169d3c0f71e95b84db320302cb4a\" data-index=\"1\" style=\"float: right; margin:10px 0 10px 10px;\">\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-8711325745898650\"\r\n     crossorigin=\"anonymous\"><\/script>\n<\/div>\n\n<div style=\"font-size: 0px; height: 0px; line-height: 0px; margin: 0; padding: 0; clear: both;\"><\/div>","protected":false},"excerpt":{"rendered":"<p>cisco port security \u53ef\u4ee5\u9650\u5236port \u7d00\u9304 mac addr &hellip; <a href=\"https:\/\/blog.pmail.idv.tw\/?p=2528\">\u95b1\u8b80\u5168\u6587 <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[49],"tags":[],"class_list":["post-2528","post","type-post","status-publish","format-standard","hentry","category-cisco"],"_links":{"self":[{"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/posts\/2528","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2528"}],"version-history":[{"count":0,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/posts\/2528\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2528"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2528"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2528"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}