Static port security is a common configuration for printers, copiers and other devices on the network that never change. This lab will discuss and demonstrate the configuration and verification of “Sticky” switchport security.
The biggest advantage of this software is that it is very small and very reliable. With Sticky Notes, you can create notes, type, ink or add a picture, add text formatting, stick them to the desktop, move them around there freely, close them to the Notes list, and sync them across devices and apps like OneNote Mobile, Microsoft Launcher for Android, and Outlook for Windows.
Real World Application & Core Knowledge
Port Security Sticky Mac
If you completed the previous lab; Configuring Dynamic Switchport Security than you’ll be pretty much up to speed in this lab.
Dynamic port security is great but what about when you connect switches to routers or other devices that need to be secured in a way to prevent unauthorized device swapping in the network. For example you have a small site location with a 1841 router and a 3560-8pc switch and an end user gets the bright idea to swap the 1841 with a WRT54G because he wants wireless and wired network connectivity.
In this case you can sticky the port that the wan router is connected to preventing unauthorized device swaps like such.
There are two ways to configure a sticky port. The first way being that you configure a static MAC address when configuring port-security on a specific interface. The next way which is more convenient is to configure a “Sticky” MAC address and leave the max MAC addresses to its default value of one. When port-security is configured this way, the first MAC address learned on the switch port will be automatically statically configured into the running-configuration as if you manually specified the MAC address.
Sticky Notes Download For Mac
In this lab you will familiarize yourself with the following new commands;
| Command | Description |
|---|---|
| switchport port-security mac-address h.h.h | This command is executed in interface configuration mode and statically sets a MAC address that allows traffic with the source MAC to traverse the switch. |
| switchport port-security mac-address sticky | This command is executed in interface configuration mode and configures the port to dynamically learn the MAC address and automatically configure the MAC address as a static MAC address associated with the port. |
| clear port-security all interface interfacename#/# | This command is executed in privileged mode to erase the current secure mac-address table for a specified switch port. |
Lab Prerequisites
- If you are using GNS3 than load the Free CCNA Workbook GNS3 topology than start devices; R1 and SW1.
- Establish a console session with devices R1 than configure the devices respected hostname(s).
- Assign the IP Address 10.1.1.1/24 to R1 Fa0/0 and the IP Address 10.1.1.10/24 to SW1’s Vlan1 interface than verify that you have IP connectivity between R1 and SW1.
Sticky App For Mac
Lab Objectives
- Enable port-security on SW1’s Fa0/1 interface and configure the interface to sticky the MAC address learned. Upon a port security violation, restrict the port. Verify your configuration.
- Change the MAC address on R1’s Fa0/0 to aaaa.aaaa.abcd then configure the same MAC address as a static MAC in port-security on SW1’s Fa0/1 interface. Verify your configuration.
Lab Instruction
Step 1. – Enable port-security on SW1’s Fa0/1 interface and configure the interface to sticky the MAC address learned. Upon a port security violation, protect the port. Verify your configuration.
In addition, a free DLC campaign pack ‘The Imperator Augustus’ is included, which follows the aftermath of Caesar’s demise.The Imperator Augustus Campaign Pack and all Emperor Edition updates are free, via automatic update, to all existing ROME II owners.If you’re new to Total War: ROME II click the Total War Academy link to learn more:About the Imperator Augustus Campaign PackThe Imperator Augustus Campaign Pack is a new playable campaign for ROME II, which rivals the original ROME II Grand Campaign in both scope and scale. Digital download rome total war 2.
To enable port-security you’ll execute the switchport port-security command as previously learned in Lab 4-19. To configure the interface to sticky the MAC address dynamically learn use the switchport port-security mac sticky command in interface configuration mode as discussed at the beginning of this lab.
Lan cable for mac. To verify your configuration you can use the following commands shown below;
Step 2. – Change the MAC address on R1’s Fa0/0 to aaaa.aaaa.abcd then configure the same MAC address as a static MAC in port-security on SW1’s Fa0/1 interface. Verify your configuration.
Keep in mind as soon as you change the MAC address on R1’s Fa0/0 interface, R1 will no longer be able to communicate to any resources on the network as the MAC address is not in the secure mac-address table on SW1 Fa0/1, thus any received frames will be dropped.
To resolve communication issue between R1 and SW1 due to the port-security violation after the MAC address on R1 has changed you’ll need to shutdown Fa0/1 and clear the secure mac-address table on that interface using the clear port-security all interface Fa0/1 command in privileged mode or configuration mode with the do command prefix. Afterward configure the new static MAC address using the switchport port-security mac aaaa.aaaa.aaab command.
To verify that connectivity has been restored between R1 and SW1, ping SW1’s Vlan1 interface from R1;