<div dir="ltr" style="text-align: left;">I hope we all know how to login to Switch by telnet or putty etc. After successful logon</p>
<p>Type Config t or config terminal to be in configuration mode</p>
<p>Following can display you existing port security ; settings<br /><span style="-webkit-text-stroke-width: 0px; background-color: #eeeeee; color: #333333; display: inline !important; float: none; font-size-adjust: none; font-stretch: normal; font: italic 15px/16.86px ";; letter-spacing: normal; text-align: left; text-indent: -24px; text-transform: none; white-space: normal; word-spacing: 0px;"></span><br /><span style="-webkit-text-stroke-width: 0px; background-color: #eeeeee; color: #333333; display: inline !important; float: none; font-size-adjust: none; font-stretch: normal; font: italic 15px/16.86px ";; letter-spacing: normal; text-align: left; text-indent: -24px; text-transform: none; white-space: normal; word-spacing: 0px;"><span style="color: black;">show port-security 1-3, 45, 8<span> ; </span></span></span><br /><span style="-webkit-text-stroke-width: 0px; background-color: #eeeeee; color: #333333; display: inline !important; float: none; font-size-adjust: none; font-stretch: normal; font: italic 15px/16.86px ";; letter-spacing: normal; text-align: left; text-indent: -24px; text-transform: none; white-space: normal; word-spacing: 0px;"><span></span></span><br /><span style="-webkit-text-stroke-width: 0px; background-color: #eeeeee; color: #333333; display: inline !important; float: none; font-size-adjust: none; font-stretch: normal; font: italic 15px/16.86px ";; letter-spacing: normal; text-align: left; text-indent: -24px; text-transform: none; white-space: normal; word-spacing: 0px;"><span></span></span></p>
<div style="line-height: normal; margin: 0in 0in 0pt;"><span style="color: black; font-family: ";Arial";,";sans-serif";; font-size: 11.5pt; mso-fareast-font-family: ";Times New Roman";; mso-fareast-language: EN-GB;">To Configure port security and edit security settings, Add or delete devices from the list</span></div>
<p></p>
<div style="line-height: normal; margin: 0in 0in 0pt;"><b><i><span style="color: black; font-family: ";Arial";,";sans-serif";; font-size: 10.5pt; mso-fareast-font-family: ";Times New Roman";; mso-fareast-language: EN-GB;">Syntax:<o:p></o:p></span></i></b></div>
<p></p>
<div style="line-height: normal; margin: 0in 0in 0pt;"><span style="color: black; font-family: ";Arial";,";sans-serif";; font-size: 10.5pt; mso-fareast-font-family: ";Times New Roman";; mso-fareast-language: EN-GB;">port-security <port-list><o:p></o:p></port-list></span></div>
<p></p>
<div style="line-height: normal; margin: 0in 0in 0pt;"><span style="color: black; font-family: ";Arial";,";sans-serif";; font-size: 10.5pt; mso-fareast-font-family: ";Times New Roman";; mso-fareast-language: EN-GB;">[learn-mode continuous]<o:p></o:p></span></div>
<p></p>
<div style="line-height: normal; margin: 0in 0in 0pt;"><span style="color: black; font-family: ";Arial";,";sans-serif";; font-size: 10.5pt; mso-fareast-font-family: ";Times New Roman";; mso-fareast-language: EN-GB;">[learn-mode static]<o:p></o:p></span></div>
<p></p>
<div style="line-height: 14.65pt; margin: 0in 0in 0pt;"><span style="color: black; font-family: ";Arial";,";sans-serif";; font-size: 10pt; mso-fareast-font-family: ";Times New Roman";; mso-fareast-language: EN-GB;">[action <none send-alarm="" send-disable="">]<o:p></o:p></none></span></div>
<p></p>
<div style="line-height: normal; margin: 0in 0in 0pt;"><span style="color: black; font-family: ";Arial";,";sans-serif";; font-size: 10.5pt; mso-fareast-font-family: ";Times New Roman";; mso-fareast-language: EN-GB;">[clear-intrusion-flag]<o:p></o:p></span></div>
<p><strong>Examples:</strong></p>
<p>To Remove the port security </p>
<div style="line-height: 14.65pt; margin: 0in 0in 0pt;"><span style="color: red;"><span style="font-family: ";Arial";,";sans-serif";; font-size: 10pt; mso-fareast-font-family: ";Times New Roman";; mso-fareast-language: EN-GB;">no port-security <port-list> </port-list></span> </span></div>
<div style="line-height: normal; margin: 0in 0in 0pt;">
<p></p>
<div style="margin: 0in 0in 10pt;"><span style="font-family: Calibri;">(config)# port-security (Port-List) learn-mode configured address-limit (No of Address bind to the port-list) Mac-address(MAC Address) Action send-disable.<o:p></o:p></span></div>
<p></p>
<div style="margin: 0in 0in 10pt;"><o:p><span style="font-family: Calibri;"> ;</span></o:p></div>
<p></p>
<div style="margin: 0in 0in 10pt;"><span style="font-family: Calibri;">Eg: (config)# port-security 28 learn-mode configured address-limit 3 mac-address 0016ea-834254 0017ea-834254 action send-disable <o:p></o:p></span></div>
<p></p>
<div style="margin: 0in 0in 10pt;"><span style="font-family: Calibri;">Removing MAC Address from the list<o:p></o:p></span></div>
<p></p>
<div style="margin: 0in 0in 10pt;"><span style="font-family: Calibri;">Command: <o:p></o:p></span></div>
<p></p>
<div style="margin: 0in 0in 10pt;"><span style="font-family: Calibri;">(config)# port-security (port-list) address-limit (Mac Address Limit After deleting the intended Mac’s) <o:p></o:p></span></div>
<p></p>
<div style="margin: 0in 0in 10pt;"><span style="font-family: Calibri;">(config)# no port-security (port-list) mac-address (MAC Address)<o:p></o:p></span></div>
<p></p>
<div style="margin: 0in 0in 10pt;"><span style="font-family: Calibri;">Eg: (config)# port-security 20 address-limit 2 <o:p></o:p></span></div>
<p></p>
<div style="margin: 0in 0in 10pt;"><span style="font-family: Calibri;">(config)# no port-security 20 mac-address 001f3c-1d7adb <o:p></o:p></span></div>
<p></p>
<div style="margin: 0in 0in 10pt;"><o:p><span style="font-family: Calibri;"> ;</span></o:p><span style="font-family: Calibri;">After assigning Port security if you plug any PC that the MAC address is not in the <o:p></o:p></span></div>
<p><span style="font-family: Calibri;">Port list the network port will be locked and cannot access it until enabling that port<o:p></o:p></span></p>
<div style="margin: 0in 0in 10pt;"><span style="font-family: Calibri;">How to unlock the port<o:p></o:p></span></div>
<p><span style="font-family: Calibri;">Command: <o:p></o:p></span><br /> <span style="font-family: Calibri;">(config)# interface ethernet (Port-List) <o:p></o:p></span><br /> <span style="font-family: Calibri;">(eth-Port no)# disable <o:p></o:p></span><br /> <span style="font-family: Calibri;">(eth-Port no)# enable<o:p></o:p></span><br /> <span style="font-family: Calibri;">Eg: (config)# interface ethernet 20 <o:p></o:p></span><br /> <span style="font-family: Calibri;">(eth-20)# disable <o:p></o:p></span><br /> <span style="font-family: Calibri;">ES-HPSW48-01(eth-20)# enable <o:p></o:p></span></p>
<div style="margin: 0in 0in 10pt;"><o:p><span style="font-family: Calibri;"> ;</span></o:p></div>
</div>
<p><span style="-webkit-text-stroke-width: 0px; background-color: #eeeeee; color: #333333; display: inline !important; float: none; font-size-adjust: none; font-stretch: normal; font: italic 15px/16.86px ";; letter-spacing: normal; text-align: left; text-indent: -24px; text-transform: none; white-space: normal; word-spacing: 0px;"><span></span></span><br />Port security ;have  ;Following parameters (<span style="-webkit-text-stroke-width: 0px; color: black; display: inline !important; float: none; font-size-adjust: none; font-stretch: normal; font: 15px/22.5px Arial, sans-serif; letter-spacing: normal; text-align: left; text-indent: 0px; text-transform: none; white-space: nowrap; word-spacing: 0px;">For information on the individual control parameters)</span></p>
<div style="background: white; line-height: 16.5pt; margin: 0in 0in 0pt; mso-list: l0 level1 lfo1; tab-stops: list .5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 10pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 11.0pt; mso-fareast-font-family: Symbol; mso-fareast-language: EN-GB;"><span style="mso-list: Ignore;">·<span style="font-size-adjust: none; font-stretch: normal; font: 7pt/normal ";Times New Roman";;"> ; ; ; ; ; ; ; ; </span></span></span><!--[endif]--><span style="font-family: Calibri;"><b><span style="mso-fareast-language: EN-GB;">Action: ;</span></b><span style="mso-fareast-language: EN-GB;">Used when a port detects an intruder. Specifies whether to send an SNMP trap to a network management station and whether to disable the port.<o:p></o:p></span></span></div>
<p></p>
<div style="background: white; line-height: 16.5pt; margin: 0in 0in 0pt; mso-list: l0 level1 lfo1; tab-stops: list .5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 10pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 11.0pt; mso-fareast-font-family: Symbol; mso-fareast-language: EN-GB;"><span style="mso-list: Ignore;">·<span style="font-size-adjust: none; font-stretch: normal; font: 7pt/normal ";Times New Roman";;"> ; ; ; ; ; ; ; ; </span></span></span><!--[endif]--><span style="font-family: Calibri;"><b><span style="mso-fareast-language: EN-GB;">Address Limit: ;</span></b><span style="mso-fareast-language: EN-GB;">Sets the number of authorized MAC addresses allowed on the port.<o:p></o:p></span></span></div>
<p></p>
<div style="background: white; line-height: 16.5pt; margin: 0in 0in 0pt; mso-list: l0 level1 lfo1; tab-stops: list .5in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 10pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 11.0pt; mso-fareast-font-family: Symbol; mso-fareast-language: EN-GB;"><span style="mso-list: Ignore;">·<span style="font-size-adjust: none; font-stretch: normal; font: 7pt/normal ";Times New Roman";;"> ; ; ; ; ; ; ; ; </span></span></span><!--[endif]--><span style="font-family: Calibri;"><b><span style="mso-fareast-language: EN-GB;">Learn-Mode: ;</span></b><span style="mso-fareast-language: EN-GB;">Specify how the port acquires authorized addresses.<o:p></o:p></span></span></div>
<p></p>
<div style="background: white; line-height: 16.5pt; margin: 0in 0in 0pt; mso-list: l0 level2 lfo1; tab-stops: list 1.0in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 10pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 11.0pt; mso-fareast-font-family: Symbol; mso-fareast-language: EN-GB;"><span style="mso-list: Ignore;">·<span style="font-size-adjust: none; font-stretch: normal; font: 7pt/normal ";Times New Roman";;"> ; ; ; ; ; ; ; ; </span></span></span><!--[endif]--><span style="font-family: Calibri;"><b><span style="mso-fareast-language: EN-GB;">Continuous</span></b><span style="mso-fareast-language: EN-GB;"> ;: Allows the port to learn addresses from inbound traffic from any connected device. This is the default setting.<o:p></o:p></span></span></div>
<p></p>
<div style="background: white; line-height: 16.5pt; margin: 0in 0in 0pt; mso-list: l0 level2 lfo1; tab-stops: list 1.0in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 10pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 11.0pt; mso-fareast-font-family: Symbol; mso-fareast-language: EN-GB;"><span style="mso-list: Ignore;">·<span style="font-size-adjust: none; font-stretch: normal; font: 7pt/normal ";Times New Roman";;"> ; ; ; ; ; ; ; ; </span></span></span><!--[endif]--><span style="font-family: Calibri;"><b><span style="mso-fareast-language: EN-GB;">Limited-Continuous: ;</span></b><span style="mso-fareast-language: EN-GB;">Sets a finite limit ( 1 &#8211; 32 ) to the number of learned addresses allowed per port.<o:p></o:p></span></span></div>
<p></p>
<div style="background: white; line-height: 16.5pt; margin: 0in 0in 0pt; mso-list: l0 level2 lfo1; tab-stops: list 1.0in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 10pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 11.0pt; mso-fareast-font-family: Symbol; mso-fareast-language: EN-GB;"><span style="mso-list: Ignore;">·<span style="font-size-adjust: none; font-stretch: normal; font: 7pt/normal ";Times New Roman";;"> ; ; ; ; ; ; ; ; </span></span></span><!--[endif]--><span style="font-family: Calibri;"><b><span style="mso-fareast-language: EN-GB;">Static: ;</span></b><span style="mso-fareast-language: EN-GB;">Enables the user to set a fixed limit on the number of MAC addresses authorized for the port and to also specify some or all of the authorized addresses. (If only some of the authorized addresses are specified, the port learns the remaining authorized addresses from the traffic received from connected devices.)<o:p></o:p></span></span></div>
<p></p>
<div style="background: white; line-height: 16.5pt; margin: 0in 0in 0pt; mso-list: l0 level2 lfo1; tab-stops: list 1.0in; text-indent: -0.25in;"><!--[if !supportLists]--><span style="font-family: Symbol; font-size: 10pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 11.0pt; mso-fareast-font-family: Symbol; mso-fareast-language: EN-GB;"><span style="mso-list: Ignore;">·<span style="font-size-adjust: none; font-stretch: normal; font: 7pt/normal ";Times New Roman";;"> ; ; ; ; ; ; ; ; </span></span></span><!--[endif]--><span style="font-family: Calibri;"><b><span style="mso-fareast-language: EN-GB;">Configured: ;</span></b><span style="mso-fareast-language: EN-GB;">Requires the explicit configuration of all MAC addresses authorized for the port. The port is not allowed to learn addresses from inbound traffic.<o:p></o:p></span></span></div>
</div>

The Cyber Security, Compliance & Cloud
Cyber Security | Digital Transformation | Cloud Computing
