How to Configure Port Security on a Cisco Switch

Join the Discord Server!
/ discord
---------------------
MY FULL CCNA COURSE
📹 CCNA - certbros.teach...
FREE CCNA FLASHCARDS
🃏 CCNA Flashcards - certbros.com/c...
HOW TO PASS THE CCNA
📚 Get a great book - amzn.to/3f16QA5
📹 Take a video course - certbros.teach...
✔ Use practice exams - www.certbros.c...
SOCIAL
🐦 Twitter - / certbros
📸 Instagram - / certbros
👔 LinkedIn - / certbros
💬 Discord - www.certbros.c...
Disclaimer: These are affiliate links. If you purchase using these links, I'll receive a small commission at no extra charge to you.
---------------------------------------------------------------------------------------------------------------
How to Configure Port Security on a Cisco Switch
Check out www.certbros.com
What is Port Security?
Port Security is a way we can lock down Cisco switches so that only the devices we intend to use the network can. For example, you might not want one of the companies employees plugging in a virus ridden personal laptop in to the corporate network and infecting everyone with god knows what!
With Port Security, you have a couple of options. You can set a maximum number of devices (mac addresses) or you can staticly tell the switch witch mac address to accept. Now the first option might be to stop people from plugging in switch upon switches and the second might be used to stop any other devices connected all together.
Port Security is a topic on the CCENT exam and its important to know what it is and how to configure it. The best advise is to follow this video through, then some other settings to see how it reacts.
#ccna #cisco #networking

[@yashkummar]

I love this straight forward and to the point.

[@Certbros]

Thanks

[@jonnysegway5716]

Nice and straight forward, well done!

[@Certbros]

Thanks man. Bit of an older video

[@africanxpress9185]

Excellent training video. Please do complete the full ICND1 100-105 Training Videos Series. Well done Sir!

[@Certbros]

Thanks! Yes the plan is to finish this course very soon!

[@Ashurudrapati]

Clearly Explained Thank you

[@Certbros]

Thanks!

[@ayap93]

This is very helpful. Thanks for the video!

[@Certbros]

Thanks for the comment. Glad you liked it!

[@rreiniss]

Love all yours videos, please more!!!

[@Certbros]

Thanks man! Making more now.

[@qmrskafg9119]

that was good but why you don't use errdisable recovery interval or casue

[@ejs961]

hello how can i enable the port security on all the Fast Ethernet ports using the interface range command?

[@abdulhaquemohammed6478]

Hi there, Thank you very much for uploading this video. It was to the point and informative. However, when I was practicing, I could not see any violations occurring. The security violation count is '0' while the security action is 'Restrict'. The link is not going down. I switched my PC with a laptop and vice-versa (in the Cisco packet tracer) yet no changes. Please advise. Thanks!

[@Corswain]

Did you set the allowed MAC address to something like he did in the video around 3mins in?

[@omenechris4698]

very good and precise, thank you very much!

[@Certbros]

No problem 👍

[@Ahmed-vw3iw]

Thanks for the explanation.

[@Certbros]

You're welcome!

[@benardnassary5054]

I will appreciate if you can finish the part of recovering port from secure down to secure up after violation occur.

[@thompsonmatthew]

Can you recommend a good book to learn more about Cisco IOS? Not doing any exams or anything, just curiosity...I've got a few managed switches to play with.

[@3jadon]

Is this the same for trunk ports?

[@sambath165]

Please show us network diagram

[@highwayhash2541]

This is great, Thank you so much !!

[@codemeister3]

Love you stuff bro

[@memyselfimemyselfi496]

This was awesome! Thanks

[@Certbros]

Thanks!

[@Tuba213]

Obrigado pela ajuda ... Muito bom e facilita o entendimento demais .

[@willimmos2774]

thank you

[@Certbros]

No problem!

[@zuliano05]

what is the funtion the command with stiky included???

[@Certbros]

The sticky command learns the mac addresses and stores them in the running config. Check out the below link. www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3560/software/release/12-2_37_se/command/reference/cr1/cli3.html#wp1948361

[@TechnicalMalayalam]

Excellent 👍

[@mh63111]

Perfect - thanks..!!

[@Certbros]

You're welcome

[@RebazCh]

Every Time I Understand With Your Videos Very Simply & Easy , Thanks Man.😍

[@Certbros]

Thanks man appreciate it!

[@RebazCh]

CertBros Can I Qustion ?

[@Certbros]

Sure what's up?

[@RebazCh]

Did you have any network Certification ?

[@cenglishpatriot]

Nice Thank You

[@Certbros]

Thanks!

[@filistonefrancis5068]

thanks for video

[@Certbros]

You're welcome. Thanks for the comment!

[@NeerajKumar-st4do]

thanku so much sir

[@Certbros]

No problem! Thanks for commenting

[@diogo8500]

Question: When setting port-security violation to protect or restrict and the interface goes down due to a violation, does it go back up after a while? Or does it have to be manually brought up? Thanks!

[@virescon]

Restrict & protect violations will recover automatically given they meet the requirements. Shutdown will result in the interface going into the err-disable state which will need to be rectified.

[@MrTosa43]

harry kane teaching ort security

[@sandeepgawai796]

Nice

[@Certbros]

Thanks Sandeep

[@jakescott9214]

It returns the error when I enter the mac: Switch(config-if)#switchport port-security mac-address 4444.4444.4444 Total secure mac-addresses on interface FastEthernet0/1 has reached maximum limit.

[@dystopian_1]

Thank you