Lab 18. Port Security - Violation Action 

SW1

Switch(config)#no errdisable recovery interval 60

Switch(config)#no errdisable recovery cause psecure-violation

Switch(config)#default int f1/0/1

R1

Router(config)#default int f0/0

R1

Router(config)#do show int f0/0 | i add

Hardware is Gt96k FE, address is 0021.d831.1bda (bia0021.d831.1bda)

SW 1

Switch(config)#interface FastEthernet 1/0/1

Switch(config-if)#switchport mode access

Switch(config-if)#switchport port-security

Switch(config-if)#switchport port-security mac-address 0021.d831.1bda

Switch(config-if)#switchport port-security violation restrict

R1

Router(config)#int F0/0

Router(config-if)#mac-address aaaa.bbbb.cccc

Router(config-if)#exit

VERIFIKASI

SW 1

Switch(config)#

*Mar 1 00:30:44.419: %PORT_SECURITY-2-PSECURE_VIOLATION: Security

violation occurred, caused by MAC address aaaa.bbbb.cccc on port

FastEthernet1/0/1.

*Mar 1 00:30:51.902: %LINEPROTO-5-UPDOWN: Line protocol on Interface

Vlan1, changed state to up

*Mar 1 00:30:52.699: %PORT_SECURITY-2-PSECURE_VIOLATION: Security

violation occurred, caused by MAC address aaaa.bbbb.cccc on port

FastEthernet1/0/1.

SW 1

Switch(config)#do show port-security interface

f1/0/1 Port Security : Enabled

Port Status : Secure-up

Violation Mode : Restrict

Aging Time : 0 mins

Aging Type : Absolute Secure Static

Address Aging : Disabled Maximum

MAC Addresses : 1

Total MAC Addresses : 1 Configured

MAC

Addresses : 1 Sticky

MAC Addresses : 0

Last Source Address:Vlan : aaaa.bbbb.cccc:1

Security Violation Count : 5