cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1208
Views
0
Helpful
3
Replies

Question on switchport port-security on 2960 stacked switches

ubergeek1
Level 1
Level 1

I have a stack of 2960's that I would like to configure using switchport port-security. The interfaces are set up like this:

interface GigabitEthernet1/0/31

switchport voice vlan 100

spanning-tree portfast

How do I add switchport port-security to the above?  Also how do I apply it to a range?   How does this affect the trunk ports like these:

interface GigabitEthernet3/0/48

description TRUNK

switchport mode trunk

Thanks

3 Replies 3

acampbell
VIP Alumni
VIP Alumni

Hi,

Start by reading this section of the 2960S config guide

http://www.cisco.com/en/US/docs/switches/lan/catalyst2960/software/release/12.2_53_se/configuration/guide/swtrafc.html#wp1038501

Regards,
Alex.
Please rate useful posts.

Regards, Alex. Please rate useful posts.

I still need help. How do I apply switch ort security on the 2960 stack and exclude certain ports?  Are there any cons with VoIP?

Don't do that on the trunks.

Get a range of ports similar to this:

Switch(config)#interface range fastethernet0/1 – 20

or this:

Switch(config)#interface range fastethernet0/1 – 4 , fastethernet0/10 – 15

Do this on all the access ports:

SW1(config-if)# switchport porty-security maximum 3

One mac address for the PC and two for the phone.  One for when it comes up and one for after it CDP's and moves its self over to the voice VLAN.  Thats as per a cisco recomendation I got a while ago...

- Be sure to rate all helpful posts

- Be sure to rate all helpful posts
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: