port security

[anitachoi3]

Hi,

There are two command:

A. mac-address-table static <mac-address> vlan 20 interface fe0/12

B. switchport port-security mac-address 1000.2000.3000

1. are both commands classified as port security?

2. for what situration, the first CLI is configured only?

3. for what situration, the second CLI is configured only?

rdgs

[Edison Ortiz · Accepted solution]

They both provide port-security services with the former being used for disabling IGMP Snooping features on multicast MAC addresses while the latter provides additional options such as violation modes (protect|restrict|shutdown) along with err-disable options as to what to do when a port violates the security.

HTH,

__

Edison.