2 laboratoriya ishi kommutatorda port xavfsizligi (port security) ni sozlash ishlatilmayotgan portlarni o`chirish

Cisco kommutatorlarida Port-security

Port-securityni sozlash

Port-security interfeysni sozlash kommutatorning port rejimlar orqali amalga oshiriladi. Ko`pchilik Cisco kommutatorlarida portlar odatda dynamic auto rejimida turadi, ushbu rejim port-security funksiyasiga to`g`ri kelmaydi. Shuning uchun interfeysni trunk yoki access rejimiga o`tkazish kerak:

switch(config-if)# switchport mode

Interfeysda port securityni ishga tushurish:

switch(config-if)# switchport port-security
Xavfsiz MAC-manzillarni sozlash

Manzillarni dinamik saqlash (sticky) buyrug`i orqali ishga tushurish:

• 
  switch(config-if)# switchport port-security mac-address sticky
  

Agar manzillarni statik tarzda kiritish kerak bo`lsa sticky buyrug`i o`rniga manzillar yoziladi:

• 
  switch (config) # interface ethernet 0/1
  
• 
  switch (config-if) # switchport port-security mac- address 0050.3e8d.6400
  

Xavfsiz MAC-manzillarning maksimal soni

switchport port-security maximum N – bu bir vaqtda N sonli MAC-manzillar interfeysda ishlashini anglatadi.

Masalan:

• 
  switch(config)# interface Fastethernet0/3
  
• 
  switch(config-if)# switchport mode access
  
• 
  switch(config-if)# switchport port-security maximum 3
  
• 
  switch(config-if)# switchport port-security