CCNA 3 Labs and Study Guide - BINARYBB.INFO – @jagalbraith

Step 3. What commands can you use to verify port security?
show port-security
show port-security address
show port-security interface fa0/4
ALSW#show port-security
Secure Port MaxSecureAddr CurrentAddr SecurityViolation Security Action
(Count) (Count) (Count)
—————————————————————————————————————-
Fa0/4 1 1 0
Shutdown
—————————————————————————————————————-
Total Addresses in System (excluding one mac per port) : 0
Max Addresses limit in System (excluding one mac per port) : 1024
ALSW#show port-security address
Secure Mac Address Table
—————————————————————————————————-
Vlan Mac Address Type Ports Remaining Age
(mins)
—— —————- —— ——- ——————-
1 00b0.d092.8057 SecureSticky Fa0/4 -
—————————————————————————————————-
Total Addresses in System (excluding one mac per port) : 0
Max Addresses limit in System (excluding one mac per port) : 1024
ALSW#show port-security interface fa0/4
Port Security : Enabled
Port Status : Secure-up
Violation Mode : Shutdown
Aging Time : 0 mins
Aging Type : Absolute
SecureStatic Address Aging : Disabled
Maximum MAC Addresses : 1
Total MAC Addresses : 1
Configured MAC Addresses : 0
Sticky MAC Addresses : 1
Last Source Address : 00b0.d092.8057
Security Violation Count : 0
Chapter 6: Catalyst Switch Configuration 311
Step 4. Test port security by removing host A and attaching host B to the FastEthernet 0/4 port. The
port LED should turn from green to OFF. If it does not, send a frame to ALSW by pinging its
VLAN interface from host B. Watch for console messages from the switch. You should see the
following:
00:06:03: %PM-4-ERR_DISABLE: psecure-violation error detected on Fa0/4, putting
Fa0/4 in err-disable state
00:06:03: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred,
caused by MAC address 00b0.d092.80c3 on port FastEthernet0/4.
00:06:04: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/4,
changed state to down
00:06:05: %LINK-3-UPDOWN: Interface FastEthernet0/4, changed state to down