Port Security (Opt.)

Port Security (Opt.)

Outside of using 802.1X, Port Security is another method of securing a switchport from unauthorized use. Below is a quick example of configuring a switchport to only accept a device with a specific MAC address. If any other device were to connect, the port would immediately shutdown and remain that way until manually re-enabled by a technician.

Switch (config)# interface FastEthernet 0/23
Switch (config-if)# switchport mode access
Switch (config-if)# switchport port-security
Switch (config-if)# switchport port-security violation shutdown
Switch (config-if)# switchport port-security mac-address sticky

Note, the first MAC address the switch sees will become the authorized MAC address, all other addresses will cause the port to shutdown.