kmfksell.blogg.se

Ruijie(config-if-FastEthernet 0/2)# switchport port-security binding 192.168.1.2 ->binding ip address 192.168.1.Switches operate at layer 2 of the OSI model (Data Link). Ruijie(config-if-FastEthernet 0/2)#switchport port-security ->enable port security Ruijie(config-if-FastEthernet 0/2)# switchport port-security binding 192.168.1.2 ->binding ip address 192.168.1.2 to interface f0/2 Ruijie(config-if-FastEthernet 0/1)#switchport port-security ->enable Port SecurityĢ.Enable port security on interface F0/2 to allow the PC (IP = 192.168.1.1 VLAN=10, MAC=any) to access network. Ruijie(config-if-FastEthernet 0/1)#switchport port-security binding 0021.CCCF.6F70 vlan 10 192.168.1.1

Ruijie(config)#interface fastEthernet 0/1 Enable port security on interface F0/1 to allow the PC (IP = 192.168.1.1 VLAN=10, MAC=cf.6f70) to access network.Assign IP address to Vlan 10 which is user gateway.

Port F0/2 can only foward traffic of PC (IP=192.168.1.2, MAC=any) to the network.Įnable Port security on port F0/1 and F0/2, then set port security maximun value to 1. If other PCs connect port F0/1, they cannot access the network neither.Ģ. If you connect PC1 to other ports, PC1 cannot access the network. Only the packets with the source MAC address in the port security address table, or IP+MAC binding configured, or IP binding configured, or the learned MAC address,can join the switch communication, while other packets are dropped.ġ. The port with port security enabled is named as secure port. You can control the packets by setting the specific MAC address statically, static IP+MAC binding or IP binding, or dynamically learning limited MAC addresses. Port security function allows the packets to enter the switch port by the source MAC address, source MAC+IP address or source IP address.