CCNA实验1.port-security

一,

二,MAC地址绑定

3550-1#conf t
3550-1(config)#int f0/1
3550-1(config-if)#switchport mode access /指定端口模式。
3550-1(config-if)#switchport port-security mac-address 0090.F510.79C1 /配置MAC地址。
3550-1(config-if)#switchport port-security maximum 1 /限制此端口允许通过的MAC地址数为1。
3550-1(config-if)#switchport port-security violation shutdown(protect(不转发不报警)/restrict(不转发报警)) /当发现与上述配置不符时，端口down或者拒绝收发。

三.MAC地址过滤

3550-1(config)#mac-address-table static 0090.F510.79C1 vlan 2 drop /在相应的Vlan丢弃流量。

3550-1(config)#mac-address-table static 0090.F510.79C1 vlan 2 int f0/1 /在相应的接口丢弃流量。

。

四.清除安全的MAC地址

Switch(config-if)#switchport port-security maximum 1

Maximum is less than number of currently secured mac-addresses.//报错

可以清除

Switch#clear port-security ?

all Clear all secure MAC addresses

configured Clear all configured secure MAC addresses

dynamic Clear all secure MAC address auto-learned by hardware

sticky Clear all secure MAC address either auto-learned or configured

清除mac-address-table

clear mac-address-table dynamic

Switch#show mac-address-table

Mac Address Table

-------------------------------------------

Vlan Mac Address Type Ports

---- ----------- -------- -----

1 0001.42dd.8aee DYNAMIC Fa0/3

1 0050.0f99.ce16 DYNAMIC Fa0/2

1 0060.3e47.29da STATIC Fa0/1

五.查看安全保护的MAC地址

Switch#show port-security int f0/1

Port Security : Enabled

Port Status : Secure-up

Violation Mode : Protect

Aging Time : 0 mins  (0表示禁止老化)

Aging Type : Absolute(absolute:从上一次学习到算起,inactivity:从上一次收到来自该mac地址的包算起)

SecureStatic Address Aging : Disabled

Maximum MAC Addresses : 1

Total MAC Addresses : 1

Configured MAC Addresses : 0

Sticky MAC Addresses : 1

Last Source Address:Vlan : 00D0.BAD0.4703:1

Security Violation Count : 0

Switch# show port-security address

Secure Mac Address Table

-------------------------------------------------------------------------------

Vlan Mac Address Type Ports Remaining Age

(mins)

---- ----------- ---- ----- -------------

1 0060.3E47.29DA SecureSticky FastEthernet0/1 -

------------------------------------------------------------------------------

Total Addresses in System (excluding one mac per port) : 0

Max Addresses limit in System (excluding one mac per port) : 102