Security Fundamentals Foundational ~5 min

Harden a switchport with port-security

On SW1, configure Fa0/1 as an access port on VLAN 10 and lock it with port-security: maximum of ONE MAC, learn it via sticky, and shut the port down on violation.

Topology

SW1

Objectives

○Fa0/1 access mode, VLAN 10
○Port-security enabled
○Maximum = 1
○Sticky learning enabled
○Violation = shutdown

Hints

Hint 1 — remember the trap

Port-security only works on ACCESS ports, and only after switchport mode access. Enabling it on a dynamic port throws an error.

Hint 2 — full sequence

enable
configure terminal
 interface fa0/1
  switchport mode access
  switchport access vlan 10
  switchport port-security
  switchport port-security maximum 1
  switchport port-security mac-address sticky
  switchport port-security violation shutdown
  end

← Previous task

IPv6 basics: address an interface

Network Fundamentals · ~4 min

Next task →

Create a VLAN, assign an access port

Network Access · ~6 min