Stop Network Intruders with Cisco Port Security
Learn how to configure port security on Cisco switches in this step-by-step tutorial. I'll show you the exact commands, demonstrate violations, and teach you the best real-world configuration using sticky MAC addresses and restrict mode.
Perfect for CCNA students and network engineers who need to secure switch ports.
⏱️ TIMESTAMPS:
00:00 Introduction
01:03 Physical security isn't enough
01:47 What information can hackers see?
02:37 Why does this happen?
03:42 Port security modes explained
04:40 Configuring port security
11:57 Other security access solutions
12:35 DO THIS RIGHT NOW
🔧 CISCO COMMANDS COVERED:
switchport mode access
switchport port-security
switchport port-security mac-address sticky
show port-security
show run interface
📋 WHAT YOU'LL LEARN:
• How to enable port security on Cisco switch ports
• The 3 port security violation modes (shutdown, restrict, protect)
• How to configure sticky MAC addresses
• How to recover from err-disabled ports
• Best practices for production environments
• When to use port security vs 802.1X
🎯 PORT SECURITY VIOLATION MODES:
• *Shutdown* (default) - Port goes err-disabled, requires manual recovery
• *Restrict* - Drops unauthorized traffic, sends SNMP alerts, port stays up
• *Protect* - Drops unauthorized traffic silently, no alerts
⚙️ RECOMMENDED CONFIGURATION:
interface GigabitEthernet1/0/1
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security violation restrict
switchport port-security mac-address sticky
no cdp enable
no lldp transmit
📚 CCNA EXAM TOPICS:
This tutorial covers CCNA 200-301 exam section 5.7 (Port Security). Essential knowledge for the CCNA certification and real-world network administration.
🎓 WHO THIS IS FOR:
• CCNA students studying for the 200-301 exam
• Network engineers configuring Cisco switches
• IT professionals responsible for network security
• System administrators managing Cisco infrastructure
• Anyone learning Cisco IOS commands
⚠️ COMMON PORT SECURITY ISSUES:
• Port goes err-disabled when user moves PC
• Multiple devices on one port (PC + IP phone)
• Users trying multiple ports and disabling them all
• MAC address table not saving after reboot
• Too many help desk tickets from port shutdowns
✅ THE SOLUTION:
Use sticky MAC addresses with restrict violation mode. This automatically learns and saves MAC addresses to the config, and keeps ports up while dropping unauthorized traffic. Way more manageable than the default shutdown mode.
💼 ABOUT ME:
I'm a network engineer with 15+ years of experience and multiple Cisco certifications including the CCNA. I make content to help people learn networking, pass the CCNA exam, and understand how to actually configure and troubleshoot Cisco equipment in production environments.
📱 CONNECT WITH ME:
→ Podcast (Life in Uptime): https://packetpushers.net/podcast/lif...
→ Instagram: @adjacentnode
→ TikTok: @adjacentnode
#PortSecurity #CiscoSwitch #CCNA #CiscoNetworking #NetworkEngineer #CiscoCCNA #SwitchConfiguration #CCNAExam #CiscoIOS #NetworkSecurity #CiscoTutorial #CCNAStudy #NetworkAdmin #CiscoCertification #PortSecurityConfiguration
---
⚡ KEY COMMANDS:
• Enable: `switchport port-security`
• Sticky MACs: `switchport port-security mac-address sticky`
• Restrict mode: `switchport port-security violation restrict`
• Verify: `show port-security`
🚀 If this tutorial helped you configure port security, hit LIKE and SUBSCRIBE for more Cisco configuration tutorials and CCNA content!
Questions about port security or Cisco switch configuration? Drop them in the comments!