Dynamic Port Security

[adilhayat]

Dear All,

With dynamic port security, I was able to disconnect one device and able to connect other one. However with sticky only those devices were allowed which were learnt i.e. 2 address IP phone and PC.  I have 3560E switches. With three address allowed one can disconnect IP phone and connect two pcs using HUB. Please correct me if I am wrong ? Which port security would u recommend to IP phones setup if we dont want any one to allow any device other than company assets. To me sticky and static are options where we want to restrict only certain devices to be connected to our network, however it may lead to significant shutdown of ports, which option do u recommed to LAN around 700 devices. Many Thanks

Port Security              : Enabled

Port Status                : Secure-up

Violation Mode             : Shutdown

Aging Time                 : 0 mins

Aging Type                 : Absolute

SecureStatic Address Aging : Disabled

Maximum MAC Addresses      : 3

Total MAC Addresses        : 3

Configured MAC Addresses   : 0

Sticky MAC Addresses       : 0

Last Source Address:Vlan   : 0xxx.xx.xxx:44

Security Violation Count   : 0

[Latchum Naidu · Accepted solution]

Hi,

Hope the below one will help you......Please try the below under the interface config mode...

#switchport mode access
#switchport port-security maximum 2
#switchport port-security mac-address sticky
#switchport port-security violation restrict

Setting port security to a max of 2, will allow the switch to learn two mac addresses. Default is 1 if port security is turned on.

Please rate the helpfull posts...

Regards,
Naidu.