In the previous video, we already learn about violation protect and shutdown, 2
next in this video, we are going to learn about violation restrict. 3
Remember that protect and restrict is same, the only differences is, if we use violation 4
protect, the security violation count will never increase, but if we use violation restrict, 5
the security violation count will increase. 6
Okay let’s just start. 7
In this case, I will add 1 more server, let’s say this is server 4, and then connecting this 8
server to the switch, here we can see that the interface is fa0/5. 9
So we will configure port security with violation restrict in fa0/5. 10
Let’s start, go to interface fa0/5, 11
and then switchport port security to enable port security. 12
Okay here we can see that we get an error “command rejected, fa0/5 is dynamic port”. 13
Remember that we need to change the mode to access first before configuring port security. 14
So here switchport mode access, and then switchport port-security again. 15
Okay here we can see that we don’t get an error anymore. 16
Next let’s configure mac address to sticky, configure maximum to 1 and violation restrict. 17
Okay now we have done configuring port security on fa0/5. 18
Let’s check it, do show port-security interface fa0/5. 19
Here we can see port security is enable, violation restrict, and sticky mac address is still 0. 20
This is means that server 4 is not registered yet. 21
Let’s send a packet from server 4, but before that, we need to configure an ip address on 22
server 4 first. 23
Let’s say the ip address is 192.168.1.6, now let’s try to send packet from server 4 24
to server 1. 25
Success, server 4 to server 3, also success. 26
Now let’s test the port security, unplug the cable from server 4 and plug the cable 27
to the hacker. 28
The light is still orange, click fast forward time, okay here already green. 29
Let’s test send a packet from hacker to server 3, the result is failed, test again, 30
still failed. 31
Let’s test from hacker to server 1, failed, test again, still failed. 32
Okay, now pc hacker can not send any packet to anywhere. 33
But here the light is still green, this is means that fa0/5 is not shutdown. 34
So remember that restrict is same as protect, the interface will not shutdown but the packet 35
will be blocked. 36
Now let’s check port security interface, do show port-security interface fa0/5. 37
Here we can see that security violation count will increase based on how many time pc hacker 38
send a packet. 39
Now the security violation count is 4, let’s try to send packet again from pc hacker, 40
Back to the switch, do show port security interface fa0/5, here we can see that now 41
security violation count is 5. 42
So remember that security violation count will increase based on how many time pc hacker 43
send a packet. 44
Okay I think enough for this video. 45
Thankyou for watching and see you on the next video