Specifications

Console(config-if)#port monitor ethernet 1/5 both
Console(config-if)#
Port Security
Port security allows you to configure a switch port with one or more device MAC addresses that are authorized to access the network through that port.
When port security is enabled on a port, the switch stops learning new MAC addresses on the specified port. Only incoming traffic with source addresses
already stored in the dynamic or static address table will be accepted as authorized to access the network through that port. If a device with an unauthorized
MAC address attempts to use the switch port, the intrusion will be detected and the switch can automatically take action by disabling the port and sending a
trap message.
To use port security, first allow the switch to dynamically learn the <source MAC address, VLAN> pair for frames received on a port for an initial period, and
then enable port security to stop address learning. Be sure you enable the learning function long enough to ensure that all valid VLAN members have been
registered on the selected port.
Note that a secure port has the following restrictions:
l It should not be connected to a network interconnection device.
l It cannot be configured as a member of a static trunk.
The Ports/Port Security page contains links to the following pages:
l Global Configuration
l Port Security Configuration
Global Configuration
On the Ports/Port Security/Global Configuration page, you can set the security action to be taken when a port intrusion is detected. This setting applies to
all ports and trunks on the switch.
The page provides one parameter to configure:
l Shutdown and Trap Indicates the action to be taken when a port security violation is detected:
¡ None: Indicates that no action should be taken (This is the default.)
¡ Trap and Shutdown: Indicates that the port or trunk should be disabled and an SNMP trap message sent
To save any changes you make in this page, click Apply Changes. If you don't want to save the changes, click Refresh.
Port Security Configuration
On the Ports/Port Security/Port Security Configuration page, you can enable/disable security for any switch port or trunk. For each port number listed in
the Port column, you can configure the Security Status parameter, which enables or disables port security on the port. (Default: disabled)