【正文】 7 2 Intrusion Detection System WSX6381IDS SAD05100HPT Switchshow interface GigabitEther slot/[1 | 2] ? Displays NAM interface information 169。 2022, Cisco Systems, Inc. All rights reserved. 91 Optimizing and Securing Multilayer Switched Networks Module 9 169。 2 03, Cisco Systems, Inc. All rights reserved. BCMSN — 915 169。 2022, Cisco Systems, Inc. All rights reserved. BCMSN — 931 Customer VLAN Requirements ? ISP customers require Inter access for multiple servers – Isolation from other customers – Communication between servers ? Traditional solution: one VLAN and IP sub per customer – High resource requirements – Limited scalability – High management plexity 169。 2022, Cisco Systems, Inc. All rights reserved. BCMSN — 927 Verifying Port Security (Cont.) Switchshow portsecurity interface interface x/y ? Displays security information for a specific interface Switchshow portsecurity interface fastether 5/1 Port Security: Enabled Port status: SecureUp Violation mode: Shutdown Maximum MAC Addresses: 11 Total MAC Addresses: 11 Configured MAC Addresses: 3 Aging time: 20 mins Aging type: Inactivity SecureStatic address aging: Enabled Security Violation count: 0 169。 2022, Cisco Systems, Inc. All rights reserved. BCMSN — 912 Configuring NAM Switch(config)interface gi 8/0 Switch(configif)switchport access vlan 93 Switch(configif)end Switch(config)monitor session 1 destination interface gi 8/1 rootlocalhostautostart addressmap enable ? Enables a collection type Rootlocalhostautostart collection enable 169。 2022, Cisco Systems, Inc. All rights reserved. 92 Optimizing Multilayer Switched Networks 169。 2022, Cisco Systems, Inc. All rights reserved. BCMSN — 916 Objectives Upon pleting this lesson, you will be able to: ? Explain basic security concepts for the multilayer switched work ? Configure authentication, authorization, and accounting on Catalyst switches ? Configure port security and portbased authentication with ? Verify the work access security configuration ? Configure VLAN access lists ? Verify the VLAN access list security configuration 169。 2022, Cisco Systems, Inc. All rights reserved. BCMSN — 932 Private VLANs 169。 2022, Cisco Systems, Inc. All rights reserved. BCMSN — 926 Verifying Port Security Switchshow portsecurity ? Displays security information for all interfaces Switchshow portsecurity Secure Port MaxSecureAddr CurrentAddr SecurityViolation Security Action (Count) (Count) (Count) Fa5/1 11 11 0 Shutdown Fa5/5 15 5 0 Restrict Fa5/11 5 4 0 Protect Total Addresses in System: