interface GigabitEthernet x/x
switchport access vlan 763 ----------------------PC所绑定的vlan
switchport mode access
switchport voice vlan 773 ----------------------voice vlan
switchport port-security maximum 3 ----------经过NAC的话需要配置为3,端口最多允许3个MAC地址
switchport port-security ------------------------开启端口安全总开关
switchport port-security aging time 2 ---------MAC地址老化时间为2分钟,到达时间地址删除
switchport port-security violation restrict ------设置违反端口安全规则后的工作方式为限制
switchport port-security aging type inactivity --当不活动时删除地址,其它地址可以变成安全地址(允许通过的地址)。
ip arp inspection limit rate 10
snmp trap mac-notification change added
spanning-tree portfast
spanning-tree bpduguard enable
ip verify source
ip dhcp snooping limit rate 10
switchport access vlan 763 ----------------------PC所绑定的vlan
switchport mode access
switchport voice vlan 773 ----------------------voice vlan
switchport port-security maximum 3 ----------经过NAC的话需要配置为3,端口最多允许3个MAC地址
switchport port-security ------------------------开启端口安全总开关
switchport port-security aging time 2 ---------MAC地址老化时间为2分钟,到达时间地址删除
switchport port-security violation restrict ------设置违反端口安全规则后的工作方式为限制
switchport port-security aging type inactivity --当不活动时删除地址,其它地址可以变成安全地址(允许通过的地址)。
ip arp inspection limit rate 10
snmp trap mac-notification change added
spanning-tree portfast
spanning-tree bpduguard enable
ip verify source
ip dhcp snooping limit rate 10