2.2.4.9 Packet Tracer - Configuring Switch Port Security
CCNA2 패킷트레이서 실습
스위치 각 포트에 포트 보안과 관련된 내용
PC1. PC2와 연결된 스위치 포트에 보안을 설정하고, 다른 포트들은 모두 shutdown을 시킴
fa0/1, fa0/2에 해당 설정을 해준다
1. switchport port-security
2. switchport port-security maximum 1
3. switchport port-security mac-address sticky
4. switchport port-security violation restrict
1. 해당 포트의 보안 모드를 활성화 시킴
2. 해당 포트에 저장하는 mac주소의 수(여기서는 1개)
3. 해당 포트의 mac 주소를 학습한다
4. 학습한 내용과 다른 mac의 데이터는 폐기한다
show running-config의 내용 중 일부
interface FastEthernet0/1
switchport mode access
switchport port-security
switchport port-security mac-address sticky
switchport port-security violation restrict
switchport port-security mac-address sticky 00E0.B027.2245
!
interface FastEthernet0/2
switchport mode access
switchport port-security
switchport port-security mac-address sticky
switchport port-security violation restrict
switchport port-security mac-address sticky 0001.647C.697E
!
interface FastEthernet0/3
shutdown
!
interface FastEthernet0/4
shutdown
!
interface FastEthernet0/5
shutdown
!
interface FastEthernet0/6
shutdown
!
interface FastEthernet0/7
shutdown
!
interface FastEthernet0/8
shutdown
!
interface FastEthernet0/9
shutdown
!
interface FastEthernet0/10
shutdown
!
interface FastEthernet0/11
shutdown
!
interface FastEthernet0/12
shutdown
!
interface FastEthernet0/13
shutdown
!
interface FastEthernet0/14
shutdown
!
interface FastEthernet0/15
shutdown
!
interface FastEthernet0/16
shutdown
!
interface FastEthernet0/17
shutdown
!
interface FastEthernet0/18
shutdown
!
interface FastEthernet0/19
shutdown
!
interface FastEthernet0/20
shutdown
!
interface FastEthernet0/21
shutdown
!
interface FastEthernet0/22
shutdown
!
interface FastEthernet0/23
shutdown
!
interface FastEthernet0/24
shutdown
!
interface GigabitEthernet1/1
shutdown
!
interface GigabitEthernet1/2
shutdown