Laboratoriya ishi №15. Cisco Packet Tracer dasturi yordamida portlar xavfsizligini ta’minlashni o‘rganish

Sticky MAC manzillari uchun Port Security funksiyasini sozlash uchun quyidagi sozlamalarni bajaring:

Switch#conf t
Switch(config)#
Switch(config)#interface fa0/1
Switch(config-if)#
Switch(config-if)#switchport mode access
Switch(config-if)#switchport access vlan 10
Switch(config-if)#switchport voice vlan 2
Switch(config-if)#switchport port-security
Switch(config-if)#switchport port-security maximum 2
Switch(config-if)#switchport port-security mac-address 0005.5E80.22A3
Switch(config-if)#switchport port-security mac-address sticky
Switch(config-if)#switchport port-security violation restrict
Yuqoridagi misolda bitta MAC manzili statik ravishda konfiguratsiya qilingan ("switchport port-security mac-address 0005.5E80.22A3") va boshqa barcha MAC manzillar (bizning holatlarimizda, yana bitta) dinamik olinadi, ammo kommutator xotirasiga yozib qo'yiladi ("switchport port-security mac-address sticky"). Agar imtiyozli rejimda "show run int fa0/1" buyrug'ini kiritsak, biz buni ko'ramiz:
interface FastEthernet0/1
switchport access vlan 10
switchport mode access
switchport voice vlan 2
switchport port-security
switchport port-security maximum 2
switchport port-security mac-address sticky
switchport port-security violation restrict
switchport port-security mac-address 0005.5E80.22A3
switchport port-security mac-address sticky 00E0.F75B.C101
Shunday qilib, telefonning MAC manzili (0005.5E80.22A3) statik ravishda kiritildi va kompyuter manzili (00E0.F75B.C101) kommutator tomonidan o'z-o'zidan olinadi va kommutatsiya konfiguratsiyasiga kiritildi.