Editing Cisco Commands (section)

== Port Security ==

=== View status of port security on an interface ===
 show port-security interface f0/1

=== Activate Port Security on an interface ===
The port cannot be a dynamic port:
 switchport mode access
Enable Port Security
 switchport port-security

=== Set the maximum number of mac addresses that can be used on that port ===
 switchport port-security maximum 1

=== Whitelist a specific mac address ===
 switchport port-security mac-address 0001.6311.E7BC

=== Enable sticky mode to automatically learn mac addresses ===
 switchport port-security mac-address sticky

=== Port Security Violation Modes ===
==== Protect ====
Silently drops packets from unknown MAC addresses while keeping the port up and generating no alerts.
 switchport port-security violation protect

==== Restrict ====
Drops packets from unknown MAC addresses and logs the violation while incrementing the security counter.
 switchport port-security violation restrict

==== Shutdown ====
Immediately disables the port when an unknown MAC address is detected, placing it into an error-disabled state.
 switchport port-security violation shutdown

=== Port Security Aging ===
==== Enable static aging on an interface ====
 switchport port-security aging static

==== Enable timed aging on an interface (5 minutes) ====
 switchport port-security aging time 5