In the previous video, we already configure port security in fa0/1. 2
Next in this video, we are going to learn about mac address sticky. 3
If you remember, when configuring port security on fa0/1, we register the mac address of server 1 manually. 4
Let’s scroll to find the command, 5
here we can see switchport port-security mac-address and then the mac-address of server 1. 6
So here we register the mac-address of server 1 manually. 7
Beside registering mac-address manually like this, we can use mac-address sticky. 8
If we use mac-address sticky, 9
the switch will detect the first computer connected to the interface. Let’s try it. 10
We are going to test for server 2, the interface is fa0/2, 11
here let’s enable, configure terminal, and then go to interface fa0/2. Remember that we need to 12
change the mode to access first before configuring port security. So here switchport mode access, 13
and then to enable port security, the command is switchport port-security. 14
Remember that this command is to enable port security. Let’s check it first, 15
do show port-security interface fa0/2. Here we can see that now the port security is disabled. 16
Now let’s enable the port security, let’s check again do show port security interface fa0/2. 17
Okay here we can see that now the port security is enabled. 18
Next let’s configure the mac address, but we will not register the mac address of server 2 manually, 19
we will use mac-address sticky. The command is switchport port-security 20
mac-address sticky. Remember that if we configure mac-address sticky, 21
the switch will detect the first computer who connected to the interface. 22
So in this case, the switch will detect that server 2 is the valid computer for fa0/2. 23
Next let’s configure the maximum, switchport port-security maximum 1, 24
and finally let’s configure the violation. 25
Okay now we have done, let’s check it, do show port-security interface fa0/2. 26
Here we can see that the port security is enable, the status is secure up, 27
violation shutdown, and maximum mac address is 1. 28
But the total mac address, configured mac address, and sticky mac address is still 0, 29
this is means that server 2 is not registered yet. Let’s try to send packet from server 2. 30
Okay here success, let’s back to the switch, let’s check the port security again, 31
okay here we can see that now configured and sticky mac address is 1. 32
Let’s try show run, here we can see in the fa0/2, remember that we configure mac address sticky, 33
and after server 2 send packet to server 3, server 2 is registered to fa0/2 34
automatically like this. So this command is added automatically by the switch. 35
Let’s make sure that this is the mac address of server 2, open the server 2, go to config, 36
fa0, here the end of mac address is 37 23:c1, this is same as in the switch. 38
Okay so now the switch recognize that the valid computer for fa0/2 is server 2. 39
I think enough for this video, you can do testing by your self, so unplug the cable from server 2 40
and plug it to the hacker, you will see that the interface will be shutdown. 41
In the next video, we are going to learn about other violation, 42
which is protect and restrict. 43
Thankyou for watching and see you on the next video