
202020
© 2002, Cisco Systems, Inc. All rights reserved.
l2-security-bh.ppt
¥ Beware management burden and performance hit
¥ Lots of platform specific options besides just ÒON/OFFÓ
Port Security Details
2002 Apr 03 15:40:32 %SECURITY-1-PORTSHUTDOWN:Port 3/21 shutdown due to no space
Available in Cat 29XX, 4K, 5K, and 6K in CatOS 5.2; 29/3500XL in
11.2(8)SA; 2950 in 12.0(5.2)WC(1); 3550 in 12.1(4)EA1
CatOS> (enable) set port security mod/ports... [enable | disable]
[mac_addr] [age {age_time}] [maximum {num_ of_mac}] [shutdown
{shutdown_time}] [violation{shutdown | restrict}]
IOS(config-if)# port security [action {shutdown | trap} | max-mac-
count addresses]
¥ MAC Tables do not have unlimited size (platform
dependant)
¥ ÒRestrictÓ option may fail under macof load and disable
the port, shutdown option is more appropriate
Commentaires sur ces manuels