In the previous video, we already learn the concept of port security. 2
The summary is, port security is used to securing switch interfaces. 3
So if one day there is hackers unplug the cable and connecting the cable to their computer, 4
the switch interface should be blocked. 5
So the hackers can not send any packet anywhere. 6
In this video, we are going to practice about port security. 7
Let’s just start, open the switch, go to CLI, enable, configure terminal, 8
next let’s go to the interface connected to the server 1, in this case fa0/1, 9
we will configure port security on fa0/1 first. 10
Here interface fa0/1. 11
To configure port security, we need to change the mode to access first, because by default, 12
the mode on the switch is dynamic auto, let’s check it, do show interface fa0/1 switchport, 13
here we can see that the administrative mode is dynamic auto. 14
And remember that we need to change the mode to access first before configuring port security. 15
So here, switchport mode access. 16
Okay next to activate port security, the command is switchport port-security like this. 17
Remember that this command is used to activate port security in this interface. 18
Next we need to register the mac address of the server 1. 19
Go to server 1, config section, and then go to fa0. 20
Here we can see a mac address. 21
Let’s copy this, 22
Back to the switch, and then let’s register the mac address of server 1, 23
the command is switchport port-security mac-address and then paste the mac address of server 1. 24
Okay, so now the server or computer that allowed to connect to fa0/1 is only server 1. 25
This is because we input the mac address of server 1 here. 26
Next we need to configure the maximum computer who are allowed to connect to this interface, 27
the command is switchport port-security maximimum 1, this is means that only 1 server or computer 28
who allowed to connect to fa0/1. 29
Last, we need to configure violation, violation is an action if there is an illegal computer 30
connected to the interface. 31
The command is switchport port-security violation and then question mark, here we can see that 32
we have 3 option for violation, which is shutdown, restrict, and protect. 33
In this case we are going to use shutdown first, we will learn about restrict and protect 34
in the next video. 35
If we use violation shutdown like this, if there is an illegal computer connected to 36
the interface, the interface will be automatically shutdown. 37
In packet tracer, the light of cable will become red. 38
Okay now we have done configuring port security on fa0/1. 39
I think enough for this video, in the next video, we are going to test our port security configuration. 40
Thankyou for watching and see you on the next video.