P ort security (port xafsizligi)

P ort security (port xafsizligi)

f 0/1
Switch>enable

Switch#show mac-address-table // portlarga ulangan mac adreslarni ko’rish 1-rasm
Switch#conf ter
Switch(config)#int fa0/1
Switch(config-if)#switchport mode access //oxirgi qurilmalar ulangan deb elon qilish
Switch(config-if)#switchport port-security mac-address sticky //birinchi portga ulangan mac adresni o’ziga saqlaydi.
Switch(config-if)#switchport port-security maximum 3 //maksimalniy 3 ta mac adresga ruxsat berish
Switch(config-if)#switchport port-security violation restrict //saqlanmagan mac adrec bo’lsa port ishlamasin
Switch(config-if)#spanning-tree portfast //o’zida saqlangan port ulansa port ishga tushsin
Switch#show mac-address interfaces fastEthernet 0/1 //aynan bitta portga ulangan mac adresni bilish 2-rasm
Switch#show port-security interface fastEthernet 0/1 //o’chib qolsa oxirgi marta qaysi mac adresdan kirilganini ko’rsa bo’ladi
Switch#show port-security //port-security sozlamalarini ko’rish 3-rasm

1-rasm kompga ulangan kompning mac adresini ko’rish mumkin.



2-rasm.switchni sozlash va port security sozlamalarini tekshirish

[Port raqami] [nechtagacha [ulangan maclar soni] [ begona maclar [ begona mac

mac ulanishi] ulangan soni ] ulangandagi harakati]



3-rasm ulanga portlarimiz xolati
Begona mac ulanganda 3 ta harakati bor bular:
protect -begona mac dan paketlarni qabul qilmaslik
restrict - begona mac dan paketlarni qabul qilmaslik va bu haqda switch oynasiga xabar yuborish
shutdown-portni butunlay o’chirib qo’yish to sist.admin uni switchniqayta yoqmaguncha (yoqish uchun int. fa0/1 ga kirib avval shutdown va no shutdown terish k.k)