5 理解交换安全.ppt

workdevicescanbe:(config-if)#switchportport-security[maximumvalue]violation{protect|restrict|shutdown}#showport-securityDisplayssecurityinformationforallinterfacesSwitch#showport-securitySecurePortMaxSecureAddrCurrentAddrSecurityViolationSecurityAction(Count)(Count)(Count)---------------------------------------------------------------------------Fa5/111110ShutdownFa5/51550RestrictFa5/11540Protect---------------------------------------------------------------------------TotalAddressesinSystem:21MaxAddresseslimitinSystem:128巢顽镰研时解滴饼遁赌卡械声旧酞未久佣烂频碾晋砰噶辩弓咽伞垦次吓献5理解交换安全5理解交换安全VerifyingPortSecurity(Cont.)Switch#showport-securityinterfacetypemod/portDisplayssecurityinformationforaspecificinterfaceSwitch#showport-5/1PortSecurity:EnabledPortstatus:SecureUpViolationmode:ShutdownMaximumMACAddresses:11TotalMACAddresses:11ConfiguredMACAddresses:3Agingtime:20minsAgingtype:InactivitySecureStaticaddressaging:EnabledSecurityViolationcount:0拉借褥旗缠屹婉蓑獭葵役亏***酣连伴徘撂头飞蝉钎谎迅祥邦剃稳辨粥琵5理解交换安全5理解交换安全VerifyingPortSecurity(Cont.)Switch#showport-securityaddressDisplaysMACaddresstablesecurityinformationSwitch#showport-securityaddressSecureMacAddressTable-------------------------------------------------------------------VlanMacAddressTypePortsRemainingAge(mins)-------------------------------------(I)(I)(I)--