Blog

Configure Switch Port Security with MAC Address Sticky

In this tutorial, we will guide you through the steps to configure switch port security with a sticky MAC address. This configuration ensures that only a specific device can connect to a particular switch port, enhancing network security. We will use the following network topology:

Topology Overview

• Switch: S1
• Port: Fa0/1
• PC: PC1 with MAC address 000A.F3DA.18DA

Type of  Switch Port Security

1. Switch Port Security with Dynamic Port
2. Switch Port Security with Manual Static MAC Address
3. Switch Port Security with MAC Address Sticky
4. Switch Port Security with Violation (Shutdown, Restrict, Protect)

Steps to Configure Switch Port Security

1. Access the Switch Configuration Mode

   Switch>enable
   Switch#configure terminal
   Switch(config)#hostname S1

2. Select the Interface

   S1(config)#interface fastEthernet 0/1

3. Set the Interface Mode to Access

   S1(config-if)#switchport mode access

4. Enable Port Security

   S1(config-if)#switchport port-security

5. Configure Sticky MAC Address

   S1(config-if)#switchport port-security mac-address sticky

6. Exit Interface Configuration Mode

   S1(config-if)#exit
   S1(config)#do write

Important Note

Before entering the write command, generate any traffic from PC1 through S1 to make the switch learn the MAC address in port security. You can achieve this by pinging or accessing a website from PC1.

Result

After completing the above steps, only the PC with the MAC address 000A.F3DA.18DA can connect to the FastEthernet 0/1 (Fa0/1) port of switch S1. Any other MAC addresses will be disallowed.

By following these steps, you can effectively secure your network by ensuring that only authorized devices can connect to specific switch ports.