Switching Lab 18 : Port Security – Violation Action

 LAB 18

Hapus konfigurasi bekas sebelumnya.

SW1

Switch(config)#no errdisable recovery interval 60 
Switch(config)#no errdisable recovery cause psecure-violation
Switch(config)#default int f1/0/1 

R1

Router(config)#default int f0/0 

Cek lagi Mac address di sisi router

R1

Router(config)#do show int f0/0 | i add 
 Hardware is Gt96k FE, address is 0021.d831.1bda (bia0021.d831.1bda) 

Konfigurasikan port-security pada SW-1

SW1

Switch(config)#interface FastEthernet 1/0/1 
Switch(config-if)#switchport mode access 
Switch(config-if)#switchport port-security 
Switch(config-if)#switchport port-security mac-address 0021.d831.1bda 
Switch(config-if)#switchport port-security violation restrict 

Kita rubah nilai mac address f0/0 pada Router

R1

Router(config)#int F0/0 
Router(config-if)#mac-address aaaa.bbbb.cccc 
Router(config-if)#exit

Verifikasi

SW1

Switch(config)# 
*Mar 1 00:30:44.419: %PORT_SECURITY-2-PSECURE_VIOLATION: Security 
violation occurred, caused by MAC address aaaa.bbbb.cccc on port 
FastEthernet1/0/1. 
*Mar 1 00:30:51.902: %LINEPROTO-5-UPDOWN: Line protocol on Interface
Vlan1, changed state to up 
*Mar 1 00:30:52.699: %PORT_SECURITY-2-PSECURE_VIOLATION: Security
violation occurred, caused by MAC address aaaa.bbbb.cccc on port 
FastEthernet1/0/1. 

Switch(config)#do show port-security interface 
f1/0/1 Port Security : Enabled 
Port Status : Secure-up 
Violation Mode : Restrict 
Aging Time : 0 mins 
Aging Type : Absolute Secure Static 
Address Aging : Disabled Maximum 
MAC Addresses : 1 
Total MAC Addresses : 1 
Configured MAC Addresses : 1 
Sticky MAC Addresses : 0 
Last Source Address:Vlan : aaaa.bbbb.cccc:1 
Security Violation Count : 5 


Comments