In the previous video, we already learn about violation shutdown. 2
Remember that we have 3 option for violation, which is shutdown, restrict, and protect. 3
If we use violation shutdown, the interface will be shutdown, the light will become red. 4
But if we use restrict or protect, the interface will not shutdown. 5
The interface will still up, but all of packet will be blocked. 6
So even the interface is up, but the hacker still can not send any packet. 7
Next, we will talk about the differences between restrict and protect. 8
If we use restrict, the security violation count will be increase every time the violation is reach, 9
but if we use protect, the security violation count will never increase. 10
What is that means? 11
Let’s go to the switch, 12
here when we check in the port security, we can see security violation count. 13
If we use protect, the security violation count will always 0, but if we use restrict, 14
the security violation count will increase every time the violation is reach. 15
Okay that is the differences between restrict and protect. 16
In this video, we are going to try protect first. 17
In this case we will configure port security on interface connected to server 3, 18
which is interface fa0/3. 19
Let’s open the switch, go to interface fa0/3 and then set the mode to access. 20
Remember that we need to change the mode to access before configuring port security 21
Next, let’s activate the port security. 22
Now let’s configure the mac address, in this case, I will configure using sticky, 23
so the switch will detect the mac address of server automatically. 24
Next, let’s configure maximum to 1. 25
And then we will use violation protect. 26
Let’s check the configuration, do show port-security interface fa0/3. 27
Here we can see that port security is enabled, the status is secure up, violation mode protect, 28
and if we see here the sticky mac address is still 0. 29
This is means that server3 is not registered yet. 30
Let’s try to send packet from server 3. 31
Let’s check in the switch again, okay here we can see that now sticky mac address is 1, 32
this is means that server 3 is registered. 33
Now let’s try to move cable from server 3 to the hacker pc. Let’s try ping from hacker 34
to server 2, here we can see that the result is failed, but the light is still orange, 35
let’s click fast forward time. 36
Let’s try to ping from hacker again, okay still failed. 37
Let’s test again, still failed, let’s test to server 1, also failed. 38
Test again, still failed. 39
This is means that the hacker can not send any packet to anywhere. 40
But here we can see that the light is still green, this is means that the port is not shutdown. 41
This is because we use violation protect, remember that if we use violation protect, 42
the interface is not shutdown, but all of packet will be blocked. 43
Let’s check the port security, do show port-security interface fa0/3. 44
Here we can see that the status is still secure up, and security violation count is still 0. 45
Once again, remember that if we use violation protect, the security violation count never increased. 46
But if we use restrict, the security violation count will increase. 47
Okay now let’s bring the cable back to server 3. 48
Fast forward time, and then let’s try to send packet from server 3 to server 2. 49
Here we can see that the result is success. 50
Let’s test again from server 3 to pc, okay this is also success. 51
So here, when we bring the cable back to the right server, the server will able to communicate again. 52
This is different with violation shutdown, if we use violation shutdown, we will need 53
to use command shutdown and then no shutdown to enable the interface. 54
But if we use violation protect, the server will up, without doing any additional configuration. 55
Okay I think enough for this video, in the next video we are going to learn about violation 56
restrict. 57
Thankyou for watching and see you on the next video.