S4128T-ON how to enable port security

Hi, 

 

First you need to enable port-security on global mode to configure port-security

OS10(config)# switchport port-security
OS10(config-if-eth1/1/x)# switchport port-security

OS10# configure terminal
OS10(config)#interface ethernet 1/1/1
OS10(config-if-eth1/1/1)#switchport port-security 
OS10(config-if-port-sec)# no disable
OS10(config-if-port-sec)#mac-learn limit 100

OS10# configure terminal
OS10(config)#interface ethernet 1/1/1
OS10(config-if-eth1/1/1)#switchport port-security 
OS10(config-if-port-sec)#no disable
OS10(config-if-port-sec)#mac-learn limit 100
OS10(config-if-port-sec)#mac-learn limit violation shutdown

OS10# configure terminal
OS10(config)#interface ethernet 1/1/1
OS10(config-if-eth1/1/1)#switchport port-security 
OS10(config-if-port-sec)#no disable
OS10(config-if-port-sec)#mac-learn limit 100
OS10(config-if-port-sec)#mac-move allow

NOTE The configured MAC address becomes secure MAC address only if you enable the port security feature on the interface.

OS10# configure terminal
OS10(config)#interface port-channel 1
OS10(conf-if-po-1)#switchport port-security 
OS10(config-if-port-sec)#no disable
OS10(config-if-po-1)#exit
OS10(config)#  mac address-table static 03:ab:cd:21:ba:01 vlan 1 interface port-channel 1

OS10# clear mac address-table secure sticky vlan 1
OS10#clear mac address-table secure sticky interface port-channel 128
OS10#clear mac address-table secure sticky address 00:00:00:00:00:01 vlan 100

OS10# show mac address-table secure sticky
os10# show mac address-table secure dynamic
os10# show mac address-table secure  static

 

 

->this is the commands sets to configure port-security.

 

 

Also Only supported in Standalone switch setup

 

 

 

Thank you for the detailed reply.  I don't have port-security as an option under switchport.

I am running OS version 10.4.0E (R3.233).

Is port-security part of that version?  Let me know if it isn't so I can arrange to have someone update the OS version.

 

Bweddell,

 

I think the issue is due to version, from what I see the command is present in 10.5, but isn't in the 10.4 version you're running. I would suggest updating and then let us know if it works on 10.5.

 

Hope this helps.