Getting the following message.

FastEthernet0/3 is dynamic port. port-security parameters cannot be set.

How the change the dyamanic port off.

You cannot configure port security on a dynamic access port. So under your interface configuration

switch(config-if)# switchport mode access

then add the command previously posted.

Jon

Even after entering a wrong mac address or incorrect vlan informartion in the command, the port is still connected and is able to ping & get reply.

Tried restarting the s/w but still same result. Any suggestion.

What is your exact requirement. please explain in detail

Assign a mac address for a port on 2950 s/w for a specific vlan. If any computer with different mac address is connected it should not obtain ip address since the specified mac address on the s/w and computer is incorrect or not matching.

What we can dot with this is that we can enable port-security on the switch with a static mac-address on it. The moment any other user tries to connect its PC on that port, it will be disabled and user will not be able to work on that port. We can also configure it to send a log to your syslog server.

Here is what you need to do :

Conf t

int fa 0/1

switchport mode access

switchport port-security

switchport port-security max 1

switchport port-security mac-address sticky

switchport port-security mac-address sticky xxxx.yyyy.zzzz

switchport port-security voilation restricted

We have use the sticky configuration so that the mac-address remain in the running-config of the switch.

HTH,

-amit singh