Security Fundamentals Foundational ~5 min

Harden a switchport with port-security

On SW1, configure Fa0/1 as an access port on VLAN 10 and lock it with port-security: maximum of ONE MAC, learn it via sticky, and shut the port down on violation.

Topology

SW1

Objectives

○Fa0/1 access mode, VLAN 10
○Port-security enabled
○Maximum = 1
○Sticky learning enabled
○Violation = shutdown

Hints

Hint 1. Remember the trap

Port-security only works on ACCESS ports, and only after switchport mode access. Enabling it on a dynamic port throws an error.

Hint 2, full sequence

enable
configure terminal
 interface fa0/1
  switchport mode access
  switchport access vlan 10
  switchport port-security
  switchport port-security maximum 1
  switchport port-security mac-address sticky
  switchport port-security violation shutdown
  end

← Previous task

IPv6 basics: address an interface

Network Fundamentals · ~4 min

Next task →

Create a VLAN, assign an access port

Network Access · ~6 min

Stuck on a lab, or not sure what to practice next?

Talk it through with a mentor on a free 20-minute call. We look at your lab, your exam date and your weak spots, and you leave with a plan.

Book free session

Cisco Mentorship

CompTIA Foundation

Firewall Security

Short Courses

More

CCNA v1.1

CCNA v2.0

CCNA Automation

CCNP

Network+

NSE 4

Lab Tasks

Videos

Packet Tracer Labs

Simulators

Harden a switchport with port-security

Stuck on a lab, or not sure what to practice next?