CCNA Port Security: Maximum Secure MACs on Access Ports

Bundle lab · $29.99

Deploy and verify port security maximum settings on host-facing access ports in a pure Layer-2 campus with two access switches uplinked to a distribution switch. You will raise the allowed secure MAC count to 2 on each user port to support a PC and a potential downstream device (e.g., a dock), then verify with show commands. No Layer-3, SVIs, or routing are used; focus purely on access VLANs, trunks, and the port-security maximum behavior.

Learning objectives

• Configure switchport port-security with a specific maximum (2) on host-facing access ports
• Verify maximum and current secure MAC counts with show port-security interface
• Differentiate what traffic is permitted vs. blocked when the secure MAC count exceeds the maximum
• Avoid misconfiguration by never applying port-security on trunks

Troubleshooting focus

• Diagnose and resolve the introduced fault: Trunk allow-lists, native VLAN alignment, and host VLAN assignment.
• Verify every link's interface status and IP addressing (`show ip interface brief`) and correct any interface that is down or misaddressed.
• Confirm each device's running configuration matches the lab objective, and bring any interface, route, or service that is not in its expected state back to health.
• Trace end-to-end reachability with ping/traceroute and isolate the first hop where forwarding fails.