Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

port security

Hi,

There are two command:

A. mac-address-table static <mac-address> vlan 20 interface fe0/12

B. switchport port-security mac-address 1000.2000.3000

1. are both commands classified as port security?

2. for what situration, the first CLI is configured only?

3. for what situration, the second CLI is configured only?

rdgs

1 ACCEPTED SOLUTION

Accepted Solutions
Hall of Fame Super Bronze

Re: port security

They both provide port-security services with the former being used for disabling IGMP Snooping features on multicast MAC addresses while the latter provides additional options such as violation modes (protect|restrict|shutdown) along with err-disable options as to what to do when a port violates the security.

HTH,

__

Edison.

1 REPLY
Hall of Fame Super Bronze

Re: port security

They both provide port-security services with the former being used for disabling IGMP Snooping features on multicast MAC addresses while the latter provides additional options such as violation modes (protect|restrict|shutdown) along with err-disable options as to what to do when a port violates the security.

HTH,

__

Edison.

115
Views
0
Helpful
1
Replies
CreatePlease to create content