Switch Port Security

[christophe.fernandes]

I don't understand what does mean the restrict option in the following command:

switchport port-security

violation {restrict | shutdown}

[paddyxdoyle]

Hi,

From Cisco:

restrict—Drops packets with unknown source addresses until you remove a sufficient number of secure MAC addresses to drop below the maximum value and causes the SecurityViolation counter to increment.

So basically, if you are allowing two MAC addresses to access a port, and the port see's a third MAC address on the switch, the switch will restrict access to only allow the previous two MACs until you either increase the amount of MAC addresses allowed, or remove the orignal ones from the address table.

HTH

Paddy

[christophe.fernandes]

Many thanks...