The Configure, Verify and Troubleshoot Port Security module provide you with the instructions and Cisco hardware to develop your hands on skills in understanding the configuration and verification of port security features and functionality. This module includes the following activities:
- Activate port security and configure static and dynamic secure MAC addresses
- Configure additional port security features including sticky MAC and violation actions
- Examine and configure err-disable recovery
Exercise 1 - Static and Dynamic Port Security
Port security is a technology that allows you to block unknown devices from being connected to a specified switch port.
In this exercise, you will configure static and dynamic port security on NYCORE1, specifically, on the port that is connected to the NYEDGE1 router.
Exercise 2 - Additional Port Security Configuration Settings
In this exercise, you will configure port security on NYCORE2 to block unknown MAC addresses from connecting to a specific switch port. In this example, there is a Cisco IP Phone connected to FastEthernet 1/0/12 interface on this switch as shown in the diagram below. You will configure the switch to refuse its connection. Your configuration will include additional parameters including:
- maximum number of MAC addresses
- sticky MAC addresses
- configuring violation modes
Exercise 3 - Configuring Err-disable Recovery
When a port security violation occurs that results in a port shutting down, the port goes into an err-disabled state. In order to recover from such a situation, you must go into the switch, shut down the interface and bring it back up.
To avoid such a procedure, it is possible to configure the port so that the err-disable state is not permanent. The interface can automatically be brought back up after a specified amount of time.
In this exercise, you will configure err-disable recovery that will provide such a function.