Wednesday, June 6, 2012

Port Security

  • Switch port security monitors a port to restrict the number of MAC addresses associated with that port in the layer 2 switching table.
  • Also possible to make only certain mac addresses only reach the Port.
  • Key features of Port Security:
    • Limiting the number of MACs  that can be associated with the port.
    • This limiting of MACs will be done based on following 3 methodes:
      • Static configuration of the allowed MAC addresses.
      • Dynamic learning of MAC addresses, up to the defined maximum, where dynamic entries are lost upon reload
      • Dynamically learning but with the switch saving those entries in the configuration (called sticky learning)