交换机端口安全之粘滞安全MAC地址

首先，为什么有粘滞安全MAC地址呢？原因是，虽然静态安全MAC地址可以使得交换机的某一接口只允许某一固定的计算机的接入，但是需要做的是，一一的找出计算机的MAC地址，所以，此时用粘滞安全MAC地址解决这个问题

SW1(config-if)#swSW1(config-if)#switchport mo acSW1(config-if)#swSW1(config-if)#switchport poSW1(config-if)#switchport port-securitySW1(config-if)#swSW1(config-if)#switchport poSW1(config-if)#switchport port-security maxSW1(config-if)#switchport port-security maximum 1SW1(config-if)#swSW1(config-if)#switchport poSW1(config-if)#switchport port-security ?mac-address Secure mac addressmaximum Max secure addressesviolation Security violation mode<cr>SW1(config-if)#switchport port-security vSW1(config-if)#switchport port-security violation shSW1(config-if)#switchport port-security violation shutdownSW1(config-if)#swSW1(config-if)#switchport poSW1(config-if)#switchport port-security macSW1(config-if)#switchport port-security mac-address ?H.H.H 48 bit mac addresssticky Configure dynamic secure addresses as stickySW1(config-if)#switchport port-security mac-address stSW1(config-if)#switchport port-security mac-address sticky //交换机端口自动粘滞MAC地址SW1(config-if)#SW1(config-if)#exit

SW1#show mac-address-tableMac Address Table-------------------------------------------
Vlan Mac Address Type Ports---- ----------- -------- -----
1 0001.4383.a201 DYNAMIC Fa0/2