violacines a la red soluciones : shutdown --puerto se apaga

protect----aki nadie se entera kk alguien esta intentando violar el sistema

restrict----trap envia mensaje k alguien esta vulnerando el puerto
S1>en
S1#config t
Enter configuration commands, one per line. End with CNTL/Z.
S1(config)#interface range fa0/1-2
S1(config-if-range)#switchport mode access
S1(config-if-range)#switchport port-security
S1(config-if-range)#switchport port-security maximum 1
S1(config-if-range)#switchport port-security mac-address sticky
----------------solucion para una violacion sin apagar los puertos y k te avise
S1(config-if-range)#switchport port-security violation restrict
--------apagamos los puertos k no se usan
S1(config-if-range)#interface range fa0/3-24, gi0/1-2
S1(config-if-range)#shutdown
S1#show mac address-table
Mac Address Table
------------------------------------------Vlan
----

Mac Address
-----------

Type
--------

Ports
-----

S1#show port-security
Secure Port MaxSecureAddr CurrentAddr SecurityViolation Security Action
(Count)
(Count)
(Count)
-------------------------------------------------------------------Fa0/1
1
0
0
Restrict
S1#
S1#show mac address-table
Mac Address Table
------------------------------------------Vlan
----

Mac Address
-----------

Type
--------

Ports
-----

1
0001.647c.697e
STATIC
Fa0/2
1
00e0.b027.2245
STATIC
Fa0/1
S1#show port-security
Secure Port MaxSecureAddr CurrentAddr SecurityViolation Security Action
(Count)
(Count)
(Count)
-------------------------------------------------------------------Fa0/1
1
1
0
Restrict
Fa0/2
1
1
0
Restrict
---------------------------------------------------------------------S1#
Fa0/2
1
0
0
Restrict
---------------------------------------------------------------------S1#

--------------------------------prueba
PC>ping 10.10.10.11

Pinging 10.10.10.11 with 32 bytes of data:

Reply
Reply
Reply
Reply

from
from
from
from

10.10.10.11:
10.10.10.11:
10.10.10.11:
10.10.10.11:

bytes=32
bytes=32
bytes=32
bytes=32

time=0ms
time=0ms
time=0ms
time=0ms

TTL=128
TTL=128
TTL=128
TTL=128

Ping statistics for 10.10.10.11:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
PC>
----luego probamos desconectando la pc2 y su cable conectando al equipo del atac
ante
S1#
%LINK-5-CHANGED: Interface FastEthernet0/2, changed state to down
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state t
o down
%LINK-5-CHANGED: Interface FastEthernet0/2, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state t
o up
show port-security
Secure Port MaxSecureAddr CurrentAddr SecurityViolation Security Action
(Count)
(Count)
(Count)
-------------------------------------------------------------------Fa0/1
1
1
0
Restrict
Fa0/2
1
1
4
Restrict
---------------------------------------------------------------------S1#