mac address security

[suthomas1]

Hi,

How do we check the max mac limit configured on the switch for permissible no. of mac address. For example, a switch might have been set for allowing only 25 mac address in numbers, allowed on the configuration.

Is there any command to check this?

Thanks in advance.

[johnlloyd_13]

hi,

you can use the show port-security or the show port-security interface x/x commands. see sample output below.

Switch#show port-security

Secure Port  MaxSecureAddr  CurrentAddr  SecurityViolation  Security Action

                (Count)       (Count)          (Count)

---------------------------------------------------------------------------

      Fa0/1              2            0                  0         Shutdown

---------------------------------------------------------------------------

Total Addresses in System (excluding one mac per port)     : 0

Max Addresses limit in System (excluding one mac per port) : 8192

Switch#show port-security interface f0/1

Port Security              : Enabled

Port Status                : Secure-down

Violation Mode             : Shutdown

Aging Time                 : 120 mins

Aging Type                 : Absolute

SecureStatic Address Aging : Disabled

Maximum MAC Addresses      : 2

Total MAC Addresses        : 0

Configured MAC Addresses   : 0

Sticky MAC Addresses       : 0

Last Source Address:Vlan   : 0000.0000.0000:0

Security Violation Count   : 0

[Sandeep Choudhary · Accepted solution]

Hi ,

I am totally agree with John.

you can find on each interafce that how many mac add. are there on a port and how much maximum you can assign.

there are 3 commands:

sh port-securty

sh port-security int fa0/--

sh port-security address .......

Reagrds