Port security tasks at a glance

To configure port security, perform the following tasks:

1. Configuring basic features of port security

   • Enabling port security

   • Setting the port security mode

   • Setting port security's limit on the number of secure MAC addresses on a port

   • Configuring secure MAC addresses

   • (Optional.) Configuring NTK

   • (Optional.) Configuring intrusion protection

2. (Optional.) Configuring extended features of port security

   • Ignoring authorization information from the server

   • Enabling MAC move

   • Enabling the authorization-fail-offline feature

   • Setting port security's limit on the number of MAC addresses for specific VLANs on a port

   • Enabling open authentication mode

   • Applying a NAS-ID profile to port security

   • Configuring the escape critical VSI feature

   The extended port security features can also take effect when port security is disabled but 802.1X or MAC authentication is enabled.

3. (Optional.) Enabling SNMP notifications for port security

4. (Optional.) Enabling logging for port security users