{"id":8048,"date":"2011-12-14T21:14:23","date_gmt":"2011-12-14T21:14:23","guid":{"rendered":"http:\/\/tajdini.net\/blog\/2011\/12\/14\/cisco-switches-port-security\/"},"modified":"2011-12-14T21:14:23","modified_gmt":"2011-12-14T21:14:23","slug":"cisco-switches-port-security","status":"publish","type":"post","link":"https:\/\/tajdini.net\/blog\/cisco-and-networking\/cisco-switches-port-security\/","title":{"rendered":"Port Security \u062f\u0631 \u0633\u0648\u0626\u06cc\u0686\u0647\u0627\u06cc \u0633\u06cc\u0633\u06a9\u0648"},"content":{"rendered":"
\n

Port Security \u06cc\u06a9\u06cc \u0627\u0632 \u062e\u0635\u0648\u0635\u06cc\u062a\u0647\u0627\u06cc \u06a9\u0646\u062a\u0631\u0644 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0644\u0627\u06cc\u0647 2 \u062f\u0631 \u0633\u0648\u0626\u06cc\u0686\u0647\u0627\u06cc Catalyst \u0633\u06cc\u0633\u06a9\u0648 \u0645\u06cc \u0628\u0627\u0634\u062f . \u062f\u0644\u06cc\u0644 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Port Security \u0627\u06cc\u0646 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u0634\u0645\u0627 \u0627\u06cc\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0631\u0627 \u0645\u06cc\u062f\u0647\u062f \u06a9\u0647 \u0628\u0647 \u062a\u0639\u062f\u0627\u062f \u062e\u0627\u0635\u06cc \u0627\u0632 \u0622\u062f\u0631\u0633\u0647\u0627\u06cc \u0645\u06a9 \u0645\u0628\u062f\u0627\u0621 \u0627\u062c\u0627\u0632\u0647 \u0648\u0631\u0648\u062f \u0628\u0647 \u067e\u0648\u0631\u062a \u0631\u0627\u0628\u062f\u0647\u06cc\u062f . \u0648 \u06cc\u06a9\u06cc \u0627\u0632 \u0645\u0648\u0627\u0631\u062f\u06cc \u06a9\u0647 \u0632\u06cc\u0627\u062f \u06a9\u0627\u0631\u0628\u0631\u062f \u062f\u0627\u0631\u062f \u0632\u0645\u0627\u0646\u06cc \u0627\u0633\u062a \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u0648\u0626\u06cc\u0686\u0647\u0627\u06cc dumb \u0628\u0635\u0648\u0631\u062a \u063a\u06cc\u0631 \u0642\u0627\u0646\u0648\u0646\u06cc \u0648\u0635\u0644 \u0628\u0647 \u0634\u0628\u06a9\u0647 \u0645\u06cc\u0634\u0648\u0646\u062f (\u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0645\u062b\u0627\u0644 \u062f\u0648 \u06cc\u0627 \u0633\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0645\u06cc \u062a\u0648\u0627\u0646\u0646\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u06cc\u06a9 \u067e\u0648\u0631\u062a access \u0627\u0632 \u0634\u0628\u06a9\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u0646\u062f) . \u0628\u0639\u0644\u0627\u0648\u0647 \u062f\u0633\u062a\u06af\u0627\u0647\u0647\u0627\u06cc unmanaged \u0639\u06cc\u0628 \u06cc\u0627\u0628\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631 \u0634\u0628\u06a9\u0647 \u067e\u06cc\u0686\u06cc\u062f\u0647 \u0645\u06cc\u06a9\u0646\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0631\u0627\u0647 \u0628\u0647\u062a\u0631\u06cc\u0646 \u0631\u0648\u0634 \u06a9\u0647 \u062c\u0644\u0648 \u0627\u06cc\u0646 \u06a9\u0627\u0631 \u0631\u0627 \u0628\u06af\u06cc\u0631\u06cc\u0645.<\/p>\n<\/p><\/div>\n<\/p>\n

\u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 port security :<\/strong><\/p>\n

port security \u0628\u0627 \u067e\u0627\u0631\u0627\u0645\u062a\u0631\u0647\u0627\u06cc \u067e\u06cc\u0634 \u0641\u0631\u0636 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u06a9 \u062f\u0633\u062a\u0648\u0631 \u0631\u0648\u06cc \u0627\u06cc\u0646\u062a\u0631\u0641\u06cc\u0633 \u0641\u0639\u0627\u0644 \u0645\u06cc\u0634\u0648\u062f.<\/p>\n

Switch(config)# interface f0\/13
Switch(config-if)# switchport port-security<\/div>\n

\u0628\u0627 \u062f\u0633\u062a\u0648\u0631 show port-security \u0634\u0645\u0627 \u0645\u06cc\u062a\u0648\u0627\u0646\u06cc\u062f \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u067e\u06cc\u0634 \u0641\u0631\u0636 port security \u0631\u0627 \u0645\u0634\u0627\u0647\u062f\u0647 \u0646\u0645\u0627\u06cc\u06cc\u0645<\/p>\n

Switch# show port-security interface f0\/13
Port Security : Enabled
Port Status : Secure-down
Violation Mode : Shutdown
Aging Time : 0 mins
Aging Type : Absolute
SecureStatic Address Aging : Disabled
Maximum MAC Addresses : 1
Total MAC Addresses : 0
Configured MAC Addresses : 0
Sticky MAC Addresses : 0
Last Source Address:Vlan : 0000.0000.0000:0
Security Violation Count : 0<\/div>\n

\u0647\u0645\u0627\u0646\u0637\u0648\u0631\u06cc \u06a9\u0647 \u0645\u0634\u0627\u0647\u062f\u0647 \u0645\u06cc\u0646\u0645\u0627\u06cc\u06cc\u062f \u062a\u0639\u062f\u0627\u062f\u06cc \u062e\u0635\u0648\u0635\u06cc\u062a \u062f\u0631 \u062a\u0635\u0648\u06cc\u0631 \u0628\u0627\u0644\u0627 \u062f\u06cc\u062f\u0647 \u0645\u06cc \u0634\u0648\u062f \u06a9\u0647 \u0647\u0645\u0647 \u0631\u0627 \u0645\u06cc\u062a\u0648\u0627\u0646\u06cc\u0645 \u062a\u0646\u0638\u06cc\u0645 \u06a9\u0646\u06cc\u0645 \u06a9\u0647 \u062f\u0631 \u0627\u062f\u0627\u0645\u0647 \u062f\u0631 \u0645\u0648\u0631\u062f \u0622\u0646\u0647\u0627 \u062a\u0648\u0636\u06cc\u062d\u0627\u062a \u0644\u0627\u0632\u0645 \u0631\u0627 \u0627\u0631\u0627\u0626\u0647 \u0645\u06cc\u06a9\u0646\u0645.
\u0648\u0642\u062a\u06cc \u06a9\u0647 \u06cc\u06a9 host \u0628\u0647 \u067e\u0648\u0631\u062a\u06cc \u06a9\u0647 \u0627\u06cc\u0646 \u0642\u0627\u0628\u0644\u06cc\u062a \u0631\u0627 \u0631\u0648\u06cc \u0622\u0646 \u062a\u0646\u0638\u06cc\u0645 \u06a9\u0631\u062f\u0647 \u0627\u06cc\u0645 \u0645\u062a\u0635\u0644 \u0634\u0648\u062f\u0622\u062f\u0631\u0633 \u0645\u06a9 host \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0627\u0648\u0644\u06cc\u0646 \u0641\u0631\u06cc\u0645 \u062f\u0631\u06cc\u0627\u0641\u062a \u0634\u062f\u0647 \u0648 \u067e\u0648\u0631\u062a \u0622\u0646 \u0631\u0627 \u0636\u0628\u0637 \u0645\u06cc\u06a9\u0646\u062f:<\/p>\n

Switch# show port-security interface f0\/13
Port Security : Enabled
Port Status : Secure-up
Violation Mode : Shutdown
Aging Time : 0 mins
Aging Type : Absolute
SecureStatic Address Aging : Disabled
Maximum MAC Addresses : 1
Total MAC Addresses : 1
Configured MAC Addresses : 0
Sticky MAC Addresses : 0
Last Source Address:Vlan : 001b.d41b.a4d8:10<\/span><\/strong>
Security Violation Count : 0<\/div>\n

\u0627\u06a9\u0646\u0648\u0646 \u0627\u062a\u0635\u0627\u0644 host \u0631\u0627 \u0627\u0632 \u067e\u0648\u0631\u062a \u0633\u0648\u0626\u06cc\u0686 \u0642\u0637\u0639 \u0645\u06cc\u06a9\u0646\u06cc\u0645\u060c \u06cc\u06a9 \u0633\u0648\u0626\u06cc\u0686 \u06a9\u0648\u0686\u06a9 \u06cc\u0627 \u0647\u0627\u0628 \u0631\u0627 \u0628\u0647 \u0622\u0646 \u0645\u062a\u0635\u0644 \u0645\u06cc\u06a9\u0646\u06cc\u0645 \u0648 \u0645\u062c\u062f\u062f\u0627 host \u0627\u0635\u0644\u06cc \u0631\u0627 \u0628\u0647 \u0647\u0627\u0628 \u06cc\u0627 \u0633\u0648\u0626\u06cc\u0686 \u0645\u062a\u0635\u0644 \u0634\u062f\u0647 \u0648\u0635\u0644 \u0645\u06cc\u06a9\u0646\u06cc\u0645 \u0648 \u0628\u0639\u062f \u0627\u0632 \u06cc\u06a9 \u062b\u0627\u0646\u06cc\u0647 host \u063a\u06cc\u0631 \u0645\u062c\u0627\u0632 \u0631\u0627 \u0628\u0647 \u0633\u0648\u0626\u06cc\u0686 unmanaged \u06cc\u0627 \u0647\u0627\u0628 \u0645\u062a\u0635\u0644 \u06a9\u0646\u06cc\u0645 \u0647\u0631\u062f\u0648 host \u062a\u0644\u0627\u0634 \u0645\u06cc\u06a9\u0646\u0646\u062f \u06a9\u0647 \u0627\u0632 \u067e\u0648\u0631\u062a access \u0628\u0647 \u0635\u0648\u0631\u062a share \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u0646\u062f . \u0628\u0627 \u0647\u0645 \u0645\u06cc\u0628\u06cc\u0646\u06cc\u0645 \u0686\u0647 \u0627\u062a\u0641\u0627\u0642\u06cc \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 host \u062f\u0648\u0645 \u0634\u0631\u0648\u0639 \u0628\u0647 \u0641\u0631\u0633\u062a\u0627\u062f\u0646 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0645\u06cc\u06a9\u0646\u062f \u0645\u06cc \u0627\u0641\u062a\u062f.<\/p>\n

%PM-4-ERR_DISABLE: psecure-violation error detected on Fa0\/13, putting Fa0\/13 in err-disable state
%PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address
0021.55c8.f13c on port FastEthernet0\/13.
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0\/13, changed state to down
%LINK-3-UPDOWN: Interface FastEthernet0\/13, changed state to down<\/p>\n

\u0627\u06af\u0631 \u0645\u062c\u062f\u0627\u062f\u0627 \u0628\u0647 \u0648\u0636\u0639\u06cc\u062a port security \u067e\u0648\u0631\u062a \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u0645 \u0645\u06cc\u062a\u0648\u0627\u0646\u06cc\u0645 \u0628\u0628\u06cc\u0646\u06cc\u0645 \u06a9\u0647 \u06cc\u06a9 \u062a\u062e\u0644\u0641 \u0645\u06a9 \u0622\u062f\u0631\u0633 \u062c\u062f\u06cc\u062f\u06cc \u0627\u062a\u0641\u0627\u0642 \u0627\u0641\u062a\u0627\u062f\u0647 \u0627\u0633\u062a<\/p>\n

Switch# show port-security interface f0\/13
Port Security : Enabled
Port Status : Secure-shutdown<\/span><\/strong>
Violation Mode : Shutdown
Aging Time : 0 mins
Aging Type : Absolute
SecureStatic Address Aging : Disabled
Maximum MAC Addresses : 1
Total MAC Addresses : 0
Configured MAC Addresses : 0
Sticky MAC Addresses : 0
Last Source Address:Vlan : 0021.55c8.f13c:10
Security Violation Count : 1<\/span><\/strong>
Switch# show interfaces f0\/13
FastEthernet0\/13 is down, line protocol is down (err-disabled) <\/span><\/span><\/strong>
Hardware is Fast Ethernet, address is 0013.c412.0f0d (bia 0013.c412.0f0d)
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255\/255, txload 1\/255, rxload 1\/255
Encapsulation ARPA, loopback not set<\/div>\n

\u0628\u0647 \u0635\u0648\u0631\u062a \u067e\u06cc\u0634 \u0641\u0631\u0636 \u06cc\u06a9 \u062a\u062e\u0644\u0641 \u0627\u0645\u0646\u06cc\u062a\u06cc \u067e\u0648\u0631\u062a (port security violation ) \u0627\u06cc\u0646\u062a\u0631\u0641\u06cc\u0634 \u0631\u0627 \u0645\u062c\u0628\u0648\u0631 \u0628\u0647 \u062d\u0627\u0644\u062a error-disabled \u0645\u06cc\u06a9\u0646\u062f \u06a9\u0647 \u0645\u06cc\u0628\u0627\u06cc\u0633\u062a\u06cc \u0645\u062f\u06cc\u0631 \u0634\u0628\u06a9\u0647 \u062f\u0648\u0628\u0627\u0631\u0647 \u0622\u0646\u0631\u0627 \u0628\u0627 \u062f\u0633\u062a\u0648\u0631 shutdown \u0648 \u062f\u0631 \u0627\u062f\u0627\u0645\u0647 \u0627\u0646 no shutdown \u0631\u0648\u06cc \u0627\u06cc\u0646\u062a\u0631\u0641\u06cc\u0633 \u0641\u0639\u0627\u0644 \u06a9\u0646\u062f.

Violation Mode<\/strong>:<\/p>\n

Shutdown<\/strong>( \u06a9\u0647 \u0628\u0635\u0648\u0631\u062a \u067e\u06cc\u0634 \u0641\u0631\u0636 \u0645\u06cc\u0628\u0627\u0634\u062f):
\u0627\u06cc\u0646\u062a\u0631\u0641\u06cc\u0633 \u062f\u0631 \u062d\u0627\u0644\u062a error-disabled \u0642\u0631\u0627\u0631 \u0645\u06cc\u06a9\u06cc\u0631\u062f \u0648 \u062a\u0645\u0627\u0645 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0648\u0631\u0648\u062f\u06cc \u0631\u0627 \u0628\u0644\u0627\u06a9 \u0645\u06cc\u06a9\u0646\u062f.
Protect<\/strong>:
\u0641\u0631\u06cc\u0645\u0647\u0627\u06cc \u06a9\u0647 \u0627\u0632 \u0645\u06a9 \u0622\u062f\u0631\u0633\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0627\u062c\u0627\u0632\u0647 \u0646\u062f\u0627\u0631\u062f \u0628\u0631\u0633\u062f \u0631\u0627 \u062d\u0630\u0641 \u0645\u06cc\u06a9\u0646\u062f \u0648 \u062a\u0631\u0627\u0641\u06cc\u06a9\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0627\u062c\u0627\u0632\u0647 \u0639\u0628\u0648\u0631 \u062f\u0627\u0631\u0646\u062f \u0628\u0647 \u0635\u0648\u0631\u062a \u0639\u0627\u062f\u06cc \u0645\u062c\u0648\u0632 \u0639\u0628\u0648\u0631 \u062f\u0627\u062f\u0647 \u0645\u06cc\u0634\u0648\u062f.
Restrict:<\/strong>
\u0647\u0645\u0627\u0646\u0646\u062f protect \u0648\u0644\u06cc \u062f\u0631 \u0627\u06cc\u0646 \u062d\u0627\u0644\u062a \u06cc\u06a9 syslog message \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u0634\u0648\u062f \u0648 \u0628\u0647 \u062a\u0639\u062f\u0627\u062f \u062a\u062e\u0644\u0641 (violation) \u0645\u06cc \u0627\u0641\u0632\u0627\u06cc\u062f.
\u0628\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u0646 \u062d\u0627\u0644\u062a violation \u0628\u0647 restrict \u0627\u06af\u0631 \u0632\u0645\u0627\u0646\u06cc \u06cc\u06a9 \u062a\u062e\u0644\u0641 \u0631\u062e \u062f\u0647\u062f \u0628\u0627\u062e\u0628\u0631 \u0645\u06cc\u0634\u0648\u06cc\u0645 \u0648\u0644\u06cc \u062a\u0631\u0627\u0641\u06cc\u06a9\u0647\u0627 \u0633\u0627\u0644\u0645 \u0633\u0627\u0644\u0645 \u0628\u0627\u0642\u06cc \u0645\u06cc\u0645\u0627\u0646\u0646\u062f<\/p>\n

Switch(config-if)# switchport port-security violation restrict
Switch(config-if)# ^Z
Switch#
%PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0021.55c8.f13c on port FastEthernet0\/13.
Switch# show port-security interface f0\/13
Port Security : Enabled
Port Status : Secure-up<\/span><\/strong>
Violation Mode : Restrict<\/span><\/strong>
Aging Time : 0 mins
Aging Type : Absolute
SecureStatic Address Aging : Disabled
Maximum MAC Addresses : 1
Total MAC Addresses : 1
Configured MAC Addresses : 0
Sticky MAC Addresses : 0
Last Source Address:Vlan : 0021.55c8.f13c:10
Security Violation Count : 3<\/span><\/strong><\/div>\n

\u0645\u062a\u0627\u0633\u0641\u0627\u0646\u0647 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0645\u062a\u062e\u0644\u0641 \u0628\u0647 \u0635\u0648\u0631\u062a \u0646\u0645\u0627\u06cc\u0634 log \u0627\u062f\u0627\u0645\u0647 \u062f\u0627\u0631\u062f \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u0628\u0647 \u0645\u0642\u062f\u0627\u0631 violation \u0627\u0636\u0627\u0641\u0647 \u0645\u06cc\u06af\u0631\u062f\u062f \u062a\u0627 \u0627\u06cc\u0646\u06a9\u0647 host \u0645\u062a\u062e\u0644\u0641 \u0627\u0632\u0628\u06cc\u0646 \u0628\u0631\u0648\u062f \u06cc\u0627 \u0628\u0647 \u0639\u0628\u0627\u0631\u062a\u06cc \u0627\u0631\u062a\u0628\u0627\u0637\u0634 \u0642\u0637\u0639 \u0634\u0648\u062f.<\/p>\n

Maximum MAC Addresses :<\/strong><\/p>\n

\u0628\u0647 \u0635\u0648\u0631\u062a \u067e\u06cc\u0634 \u0641\u0631\u0636 port security \u062a\u0639\u062f\u0627\u062f \u06cc\u06a9 \u0622\u062f\u0631\u0633 \u0645\u06a9 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0648\u0631\u0648\u062f\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0645\u06cc\u062a\u0648\u0627\u0646\u06cc\u0645 \u0622\u0646\u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u06cc\u0645 \u0628\u0631\u0627\u06cc \u0645\u062b\u0627\u0644 \u0628\u0631\u0627\u06cc \u0639\u0628\u0648\u0631 \u062f\u0627\u062f\u0646 \u0645\u06a9 \u0622\u062f\u0631\u0633 \u06cc\u06a9 host \u0648 \u06cc\u06a9 IP phone \u06a9\u0647 \u0628\u0635\u0648\u0631\u062a \u0633\u0631\u06cc \u0628\u0647 \u067e\u0648\u0631\u062a \u0633\u0648\u0626\u06cc\u0686 \u0645\u062a\u0635\u0644 \u0634\u062f\u0647 \u0627\u0646\u062f \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u0645 \u0627\u0632 \u0627\u06cc\u0646 \u062e\u0635\u0648\u0635\u06cc\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u0645 .
\u0648 \u06cc\u06a9 \u0645\u062b\u0627\u0644 \u062f\u06cc\u06af\u0631 \u0627\u06cc\u0646\u06a9\u0647 \u0641\u06a9\u0631 \u06a9\u0646\u06cc\u062f \u06a9\u0647 \u06cc\u06a9 \u0647\u0627\u0628 \u0628\u0627 12 \u067e\u0648\u0631\u062a \u062f\u0627\u0631\u06cc\u062f \u06a9\u0647 \u0628\u0647 \u0633\u0648\u0626\u06cc\u0686 \u0645\u062a\u0635\u0644 \u0628\u0627\u0634\u062f \u0648 \u0634\u0645\u0627 \u0628\u062e\u0648\u0627\u0647\u06cc\u062f \u0628\u0647 12 \u0645\u06a9 \u0622\u062f\u0631\u0633 \u0627\u062c\u0627\u0632\u0647 \u0639\u0628\u0648\u0631 \u0628\u062f\u0647\u06cc\u062f \u0628\u0627\u06cc\u062f \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u062f\u0633\u062a\u0648\u0631 \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u0631\u0627 \u0627\u0639\u0645\u0627\u0644 \u06a9\u0646\u06cc\u062f.
– \u062a\u0639\u062f\u0627\u062f \u0645\u0627\u06a9\u0632\u06cc\u0645\u0645 \u0645\u06a9 \u0622\u062f\u0631\u0633\u06cc \u06a9\u0647 \u0645\u06cc\u062a\u0648\u0627\u0646\u06cc\u0645 \u0628\u0631\u0627\u06cc \u06cc\u06a9 \u067e\u0648\u0631\u062a \u062a\u0639\u06cc\u06cc\u0646 \u06a9\u0646\u06cc\u0645 132 \u0645\u06a9 \u0622\u062f\u0631\u0633 \u0645\u06cc \u0628\u0627\u0634\u062f .<\/strong>
\u0628\u0631\u0627\u06cc \u062a\u063a\u06cc\u06cc\u0631 \u0627\u06cc\u0646 \u062e\u0635\u0648\u0635\u06cc\u062a \u0627\u0632 \u062f\u0633\u062a\u0648\u0631 \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u06a9\u0646\u06cc\u0645.<\/p>\n

Switch(config-if)# switchport port-security maximum 2<\/div>\n

\u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u06af\u0632\u06cc\u0646\u0647 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u06a9\u0647 \u0645\u06cc\u062a\u0648\u0627\u0646\u06cc\u0645 \u062a\u0639\u062f\u0627\u062f \u0645\u0627\u06a9\u0632\u06cc\u0645\u0645 \u0645\u06a9 \u0628\u0631\u0627\u06cc vlan \u0647\u0627\u06cc access \u0648 voice \u0631\u0627 \u062a\u0639\u06cc\u06cc\u0646 \u06a9\u0646\u06cc\u0645( \u0641\u0631\u0636 \u0645\u06cc\u06a9\u0646\u06cc\u0645 \u06a9\u0647 \u06cc\u06a9 voice vlan \u0631\u0648\u06cc \u0627\u06cc\u0646\u062a\u0631\u0641\u06cc\u0633 \u062a\u0646\u0638\u06cc\u0645 \u0634\u062f\u0647 \u0627\u0633\u062a)<\/p>\n

Switch(config-if)# switchport port-security maximum 1 vlan access
Switch(config-if)# switchport port-security maximum 1 vlan voice<\/div>\n

\u06cc\u0627\u062f \u06af\u06cc\u0631\u06cc MAC Address <\/strong>
\u06cc\u06a9 \u0645\u062f\u06cc\u0631 \u0634\u0628\u06a9\u0647 \u0645\u06cc\u062a\u0648\u0627\u0646\u062f \u062a\u0639\u06cc\u06cc\u0646 \u06a9\u0646\u062f \u06a9\u0647 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0686\u0647 \u0645\u06a9 \u0622\u062f\u0631\u0633\u06cc \u0627\u062c\u0627\u0632\u0647 \u0639\u0628\u0648\u0631 \u0627\u0632 \u0627\u06cc\u0646\u062a\u0631\u0641\u06cc\u0633 \u0631\u0627 \u062f\u0627\u0631\u062f.\u0645\u06a9 \u0622\u062f\u0633\u0647\u0627 \u0645\u06cc\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0647 \u0635\u0648\u0631\u062a \u0627\u0646\u062a\u062e\u0627\u0628\u06cc \u0628\u0631\u0627\u06cc \u0647\u0631 vlan \u062a\u0646\u0638\u06cc\u0645 \u0634\u0648\u0646\u062f ( access \u06cc\u0627 voice )<\/p>\n

Switch(config-if)# switchport port-security mac-address 001b.d41b.a4d8 ?
vlan set VLAN ID of the VLAN on which this address can be learned<\/p>\n

Switch(config-if)# switchport port-security mac-address 001b.d41b.a4d8 vlan access <\/div>\n

\u0628\u062f\u06cc\u0647\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0631\u0648\u0634 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 static \u0628\u0631\u0627\u06cc \u0645\u06a9 \u0622\u062f\u0631\u0633 \u0631\u0648\u0634 \u0631\u0627\u062d\u062a\u06cc \u0646\u06cc\u0633\u062a \u0634\u0645\u0627 \u0645\u06cc\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u0631\u0648\u0634 \u0631\u0627\u062d\u062a \u062a\u0631\u06cc \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06af\u0631\u06cc\u0646\u0647 sticky \u0631\u0648\u06cc \u062f\u0633\u062a\u0648\u0631 port security \u0628\u0647 \u0635\u0648\u0631\u062a \u0627\u062a\u0648\u0645\u0627\u062a \u0645\u06a9 \u0622\u062f\u0631\u0633 host \u06cc \u0631\u0627 \u06a9\u0647 \u0628\u0647 \u067e\u0648\u0631\u062a \u0633\u0648\u0626\u06cc\u0686 \u0645\u062a\u0635\u0644 \u0627\u0633\u062a \u0631\u0627 \u0627\u062e\u062a\u0635\u0627\u0635 \u062f\u0647\u06cc\u062f.
\u0646\u06a9\u062a\u0647:\u0628\u0631\u0627\u06cc \u063a\u06cc\u0631 \u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 \u0647\u0631 \u06a9\u062f\u0627\u0645 \u0627\u0632 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0628\u0627 \u06af\u0630\u0627\u0634\u062a\u0646 \u0639\u0628\u0627\u0631\u062a no \u0628\u0647 \u0627\u0628\u062a\u062f\u0627\u06cc \u0622\u0646 \u0645\u06cc\u062a\u0648\u0627\u0646\u06cc\u0645 \u0622\u0646 \u062f\u0633\u062a\u0648\u0631 \u0631\u0627 \u063a\u06cc\u0631 \u0641\u0639\u0627\u0644 \u06a9\u0646\u06cc\u0645:<\/p>\n

Switch(config-if)# no switchport port-security mac-address 001b.d41b.a4d8
Switch(config-if)# switchport port-security mac-address sticky
Switch(config-if)# ^Z
Switch# show port-security interface f0\/13
Port Security : Enabled
Port Status : Secure-up
Violation Mode : Restrict
Aging Time : 0 mins
Aging Type : Absolute
SecureStatic Address Aging : Disabled
Maximum MAC Addresses : 1
Total MAC Addresses : 1
Configured MAC Addresses : 0
Sticky MAC Addresses : 1
Last Source Address:Vlan : 001b.d41b.a4d8:10
Security Violation Count : 0<\/div>\n

\u06a9\u0627\u0647\u0634 \u0632\u0645\u0627\u0646 \u0636\u0628\u0637 \u0645\u06a9 \u0622\u062f\u0631\u0633(MAC Address Aging) \u062f\u0631 port security :<\/strong><\/p>\n

\u0628\u0647 \u0635\u0648\u0631\u062a \u067e\u06cc\u0634 \u0641\u0631\u0636 \u0645\u06a9 \u0622\u062f\u0631\u0633 \u0628\u0635\u0648\u0631\u062a \u0647\u0645\u06cc\u0634\u06af\u06cc \u062f\u0631 \u067e\u0648\u0631\u062a\u06cc \u06a9\u0647 \u0642\u0627\u0628\u0644\u06cc\u062a port security \u0631\u0627 \u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0647 \u0627\u06cc\u0645 \u0636\u0628\u0637 \u0645\u06cc\u0634\u0648\u062f .\u0628\u0627 aging \u0645\u06cc\u062a\u0648\u0627\u0646\u06cc\u0645 \u062a\u0646\u0638\u06cc\u0645 \u06a9\u0646\u06cc\u0645 \u06a9\u0647 \u0622\u062f\u0631\u0633 \u0636\u0628\u0637 \u0634\u062f\u0647 \u062a\u0648\u0633\u0637 port security \u0628\u0639\u062f \u0627\u0632\u0637\u06cc \u06cc\u06a9 \u0632\u0645\u0627\u0646 \u0645\u0639\u06cc\u0646 expire \u0634\u0648\u062f. \u0627\u06cc\u0646 \u062e\u0635\u0648\u0635\u06cc\u062a \u0628\u0647 \u06cc\u06a9 host \u062c\u062f\u06cc\u062f \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u062f\u0647\u062f \u06a9\u0647 \u0628\u0647 \u067e\u0648\u0631\u062a\u06cc \u06a9\u0647 \u0627\u062a\u0635\u0627\u0644 host \u0627\u0632 \u0622\u0646 \u0642\u0637\u0639 \u0634\u062f\u0647 \u0645\u062a\u0635\u0644 \u0634\u0648\u062f. Aging \u0645\u06cc\u062a\u0648\u0627\u0646\u062f \u0628\u0631\u0627\u06cc \u062a\u0627\u062b\u06cc\u0631 \u062f\u0631 \u06cc\u06a9 \u0645\u062f\u062a \u0632\u0645\u0627\u0646 \u0645\u0639\u06cc\u0646\u06cc \u062a\u0646\u0638\u06cc\u0645 \u0634\u0648\u062f \u06cc\u0627 \u0645\u062f\u062a \u0632\u0645\u0627\u0646 \u06a9\u0647 \u0647\u06cc\u0686 \u0641\u0639\u0627\u0644\u06cc\u062a\u06cc \u0627\u0646\u062c\u0627\u0645 \u0646\u0634\u0648\u062f.
\u062f\u0631 \u0645\u062b\u0627\u0644 \u0632\u06cc\u0631 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0628\u0647 \u0627\u06cc\u0646 \u0635\u0648\u0631\u062a \u0627\u0633\u062a \u06a9\u0647 \u0645\u06a9 \u0622\u062f\u0631\u0633 \u0628\u0639\u062f \u0627\u0631 5 \u062f\u0642\u06cc\u0642\u0647 \u0639\u062f\u0645 \u0641\u0639\u0627\u0644\u06cc\u062a expire \u0645\u06cc\u0634\u0648\u062f<\/p>\n

Switch(config-if)# switchport port-security aging time 5
Switch(config-if)# switchport port-security aging type inactivity
Switch(config-if)# ^Z
Switch# show port-security interface f0\/13
Port Security : Enabled
Port Status : Secure-up
Violation Mode : Restrict
Aging Time : 5 mins
Aging Type : Inactivity<\/span><\/strong>
SecureStatic Address Aging : Disabled
Maximum MAC Addresses : 1
Total MAC Addresses : 1
Configured MAC Addresses : 0
Sticky MAC Addresses : 0
Last Source Address:Vlan : 001b.d41b.a4d8:10
Security Violation Count : 0<\/p>\n

\u0628\u0639\u062f \u0627\u0632 5 \u062f\u0642\u06cc\u0642\u0647 \u062e\u0648\u0627\u0647\u06cc\u0645 \u062f\u06cc\u062f \u06a9\u0647 \u0622\u062f\u0631\u0633 \u067e\u0627\u06a9 \u0634\u062f\u0647 \u0627\u0633\u062a:<\/p>\n

Switch# show port-security interface f0\/13
Port Security : Enabled
Port Status : Secure-up
Violation Mode : Restrict
Aging Time : 5 mins
Aging Type : Inactivity
SecureStatic Address Aging : Disabled
Maximum MAC Addresses : 1
Total MAC Addresses : 0<\/span><\/strong>
Configured MAC Addresses : 0
Sticky MAC Addresses : 0
Last Source Address:Vlan : 001b.d41b.a4d8:10
Security Violation Count : 0<\/div>\n

Auto-recovery<\/strong>:<\/div>\n

\u0628\u0631\u0627\u06cc \u0627\u062c\u062a\u0646\u0627\u0628 \u0627\u0632 \u0645\u062f\u0627\u062e\u0644\u0647 \u062f\u0633\u062a\u06cc \u0628\u0631\u0627\u06cc \u0628\u0631\u06af\u0631\u062f\u0627\u0646\u062f\u0646 \u0648\u0636\u0639\u06cc\u062a \u067e\u0648\u0631\u062a \u0628\u0647 \u062d\u0627\u0644\u062a \u0639\u0627\u062f\u06cc \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u067e\u0648\u0631\u062a \u062a\u0648\u0633\u0637 port security \u0645\u062c\u0628\u0648\u0631 \u0628\u0647 \u0631\u0641\u062a\u0646 \u0628\u0647 \u062d\u0627\u0644\u062a error-disabled \u0645\u06cc\u0634\u0648\u062f \u0645\u06cc\u062a\u0648\u0627\u0646\u06cc\u0645 \u0642\u0627\u0628\u0644\u06cc\u062a auto-recovery \u0631\u0627 \u0628\u0631\u0627\u06cc Port security violation \u0641\u0639\u0627\u0644 \u06a9\u0646\u06cc\u0645.\u0641\u0627\u0635\u0644\u0647 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u067e\u0648\u0631\u062a \u0628\u0647 \u062d\u0627\u0644\u062a \u0639\u0627\u062f\u06cc \u0628\u0631 \u0645\u06cc\u06af\u0631\u062f\u062f \u0628\u0631 \u062d\u0633\u0628 \u062b\u0627\u0646\u06cc\u0647 \u0627\u0633\u062a.<\/p>\n

Switch(config)# errdisable recovery cause psecure-violation
Switch(config)# errdisable recovery interval 600<\/div>\n
<\/div>\n

\u062f\u0631 \u0645\u062b\u0627\u0644 \u0628\u0627\u0644\u0627 \u062e\u0648\u0627\u0647\u06cc\u0645 \u062f\u06cc\u062f \u06a9\u0647 \u0628\u0639\u062f \u0627\u0632 \u062f\u0647 \u062f\u0642\u06cc\u0642\u0647 \u06a9\u0647 \u067e\u0648\u0631\u062a \u0628\u0647 \u062d\u0627\u0644 error-disabled \u0631\u0641\u062a\u0647 \u0627\u0633\u062a . \u0628\u0647 \u0635\u0648\u0631\u062a \u0627\u062a\u0648\u0645\u0627\u062a \u0639\u0645\u0644\u06a9\u0631\u062f \u067e\u0648\u0631\u062a \u0628\u0647 \u062d\u0627\u0644\u062a \u0639\u0627\u062f\u06cc \u0628\u0631\u0645\u06cc\u06af\u0631\u062f\u062f.<\/p>\n

%PM-4-ERR_RECOVER: Attempting to recover from psecure-violation err-disable state on Fa0\/13
%LINK-3-UPDOWN: Interface FastEthernet0\/13, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0\/13, changed state to up<\/div>\n
<\/div>\n

\u0646\u06a9\u062a\u0647: port security \u06cc\u06a9 \u062e\u0635\u0648\u0635\u06cc\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u0642\u0627\u0628\u0644 \u0627\u0637\u0645\u06cc\u0646\u0627\u0646 \u0646\u06cc\u0633\u062a. \u0686\u0648\u0646 mac-address \u0647\u0627 \u0642\u0627\u0628\u0644 spoof \u0634\u062f\u0646 \u0645\u06cc\u0628\u0627\u0634\u0646\u062f \u0648 \u0686\u0646\u062f\u06cc\u0646 host \u0647\u0646\u0648\u0632 \u0645\u06cc\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0647 \u0631\u0627\u062d\u062a\u06cc \u067e\u0634\u062a \u06cc\u06a9 \u0631\u0648\u062a\u0631 \u06a9\u0648\u0686\u06a9 \u0645\u062e\u0641\u06cc \u0634\u0648\u0646\u062f<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

Port Security \u06cc\u06a9\u06cc \u0627\u0632 \u062e\u0635\u0648\u0635\u06cc\u062a\u0647\u0627\u06cc \u06a9\u0646\u062a\u0631\u0644 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0644\u0627\u06cc\u0647 2 \u062f\u0631 \u0633\u0648\u0626\u06cc\u0686\u0647\u0627\u06cc Catalyst \u0633\u06cc\u0633\u06a9\u0648 \u0645\u06cc \u0628\u0627\u0634\u062f . \u062f\u0644\u06cc\u0644 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Port Security \u0627\u06cc\u0646 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u0634\u0645\u0627 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[221,229],"tags":[259,264,273,90],"class_list":["post-8048","post","type-post","status-publish","format-standard","hentry","category-cisco-and-networking","category-network-and-protocol-security","tag-network-security","tag-persian","tag-switching","tag-cisco"],"_links":{"self":[{"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/posts\/8048","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/comments?post=8048"}],"version-history":[{"count":0,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/posts\/8048\/revisions"}],"wp:attachment":[{"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/media?parent=8048"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/categories?post=8048"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/tags?post=8048"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}