Switch Port Security
Port Security is the security mechanism used in switches. With Port Security mechanism, a specific port of a switch can be protected with undesirable access.
The MAC address numbers connected to port or the specific MAC addresses can be configured on a swithport with Port Security. By doing this configuration, desired numbered of devices can connect to the switch over one port. And also a specific MAC addressed device can be allowed to access this port.
The number of desired device number is mentioned. After that the MAC address of this devices configured either statically or dynamically(sticky). If a manual MAC address is configured, then a device with this MAC address is waited and allowed to access. If there is no manual configuration, then we can configure dynamic(sticky) MAC adress learning. And the first connected devices’s MAC address are registered up to the configured max accepted device value.
You can see the below shape as a little referance for port security. In this topology, in the switch there are maximum 2 allowed MAC. And the allowed MAC adresses are mentined statically. So, the Host A and Host C is allowed, but Host be is not allowed for this port.
On Cisco Catalyst Switches to enable Port Security…
Maximum Number of MAC addresses allowed on the port…
Statically configuration of allowed MAC addresses on the port…
Port Security with VLANs
We can also configure Switch Port Security for a VLAN. Let’s see how can we do this configuration.