ccna 8

ccna 8.Use the command switchport port-security aging (static | time time \ type {absolute [inactivity}} to enable or disable the static aging feature for secure ports, or to set the aging time or type.6.3.1.5 Port Security with IP TelephonyA typical port security configuration for a voice port requires 3 secure MAC addresses to support an IP phone and a PCo This is because the IP phone requires up to 2 MAC addresses when the port is connected to a Cisco IP phone. The IP phone's address is learned in the voice VLAN ± or it can be learned by accessing the VLAN. Connecting a PC to an IP phone requires an additional MAC address.Addresses are usually learned dynamically. However, when configuring port security for 1P phones, the voice address cannot be sticky. Violation of this policy will result in a port shutdown (shutdown) o and the aging timeout for the learned MAC address is set to 2 hours. Note: In higher-end switches, such as the Catalyst 4500 Series with IOS 12.2 or later, port security is VLAN-aware. Therefore only two MAC addresses are required, one for the IP phone and the other for the connected PC.164 Chapter 6 Protecting the Local Area Network 6.3.2 Verifying Port Security6.3.2.1 Verifying Port Security for an InterfaceWhen port security is enabled, the administrator should use the show command to verify that the port has learned the MAC address. In addition, the show commands are useful for monitoring and troubleshooting port security configurations. They can be used to view information such as the maximum number of MAC addresses for the port in question, the number of violations, and the current violation mode.Use the show port-security command to view the switch's port security settings, including the number of violations, the interfaces configured, and the action of the security violation. Use the show port-security [interface interface-id] command to view the port security settings for a specified interface, including the maximum number of secure MAC addresses allowed on this interface, the number of secure MAC addresses on the interface, the number of security violations that have occurred, and the violation mode.6.3.2.2 Verifying Port Security for an AddressUse the showport-security [interface interface-id] address command to view all secure MAC addresses configured on all switch interfaces or on a specified interface, as well as aging information for each address.