Lab 16. Port Security – Default Violation

R1

Router(config)#do show int f0/0 | i address

Hardware is Gt96k FE, address is 0021.d831.1bda (bia 0021.d831.1bda)

SW-1

Switch(config)#interface FastEthernet1/0/1

Switch(config-if)#switchport mode access

Switch(config-if)#switchport port-security

Switch(config-if)#switchport port-security mac-address 0021.d831.1bda 

CEK DI #DO show port-security interface f1/0/1

SW-1

Switch#show port-security interface f1/0/1

Port Security : Enabled

Port Status : Secure-up Violation

Mode : Shutdown

Aging Time : 0 mins

Aging Type : Absolute Secure Static

Address Aging : Disabled Maximum

MAC Addresses : 1

Total MAC Addresses : 1

Configured MAC Addresses : 1

Sticky MAC Addresses : 0

Last Source Address:Vlan : 0021.d831.1bda:1

Security Violation Count : 0

Coba kita merubah mac address

R1

Router(config)#int F0/0

Router(config-if)#mac-address aaaa.bbbb.cccc

Router(config-if)#exit 

Kita cek switch

SW-1

Switch#show port-security interface f1/0/1

Port Security : Enabled

Port Status : Secure-shutdown

Violation Mode : Shutdown

Aging Time : 0 mins

Aging Type : Absolute Secure Static

Address Aging : Disabled Maximum

MAC Addresses : 1

Total MAC Addresses : 1

Configured MAC Addresses : 1

Sticky MAC Addresses : 0

Last Source Address:Vlan : aaaa.bbbb.cccc:1

Security Violation Count : 1

SW-1

Switch#show int f1/0/1

FastEthernet1/0/1 is down, line protocol is down (err-disabled)