Port Security

Port Security controls port access based on MAC addresses.

Max number of MAC addresses per port is 1024.

By default, port security learns MAC addresses dynamically and stores them in the CAM table and runnung configuration. If the switch reloads, port security will have to relearn a new set of MAC addresses. Use "sticky" to make the MAC addresses persistent across a switch reload.

switchport port-security violation {shutdown  |  restrict | protect}

Shutdown: Port is immediately put into errdisable mode. Must be reenabled manually / throuth errdisable recovery.

Restrict: Port is allowed to stay up, and all packets from the violating MAC address are dropped. Switch keeps record and can send an SNMP trap and Syslog message.

Protect: Port is allowed to stay up, and packets from the violating MAC addresses are dropped. No record is kept.