Cisco WS-SUP32-GE-3B Software Configuration Guide - Page 729

43 C H A P T E R Configuring Port Security This chapter describes how to configure the port security feature. Note For complete syntax and usage information for the commands used in this chapter, refer to the Catalyst Supervisor Engine 32 PISA Cisco IOS Command Reference, Release 12.2ZY, at this URL: http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2ZY/command/reference/cmdref.h tml This chapter consists of these sections: • Understanding Port Security, page 43-1 • Default Port Security Configuration, page 43-3 • Port Security Guidelines and Restrictions, page 43-3 • Configuring Port Security, page 43-4 • Displaying Port Security Settings, page 43-11 Understanding Port Security These sections describe port security: • Port Security with Dynamically Learned and Static MAC Addresses, page 43-1 • Port Security with Sticky MAC Addresses, page 43-2 Port Security with Dynamically Learned and Static MAC Addresses You can use port security with dynamically learned and static MAC addresses to restrict a port's ingress traffic by limiting the MAC addresses that are allowed to send traffic into the port. When you assign secure MAC addresses to a secure port, the port does not forward ingress traffic that has source addresses outside the group of defined addresses. If you limit the number of secure MAC addresses to one and assign a single secure MAC address, the device attached to that port has the full bandwidth of the port. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 43-1