keyword: 750(config-if)#switchport port-security aging time ? <1-1440> Aging time in minutes. Enter a value between 1 and 1440 3750(config-if)# switchport port-security aging time 30 To see the status of port security, use the show port-security command. This command shows a nice summary of all ports on which port security is enabled, how many Port Security addresses are configured for them, how many have been discovered, and how many violations have occurred: 3750#sho port-security Secure Port MaxSecureAddr CurrentAddr SecurityViolation Security Action (Count) (Count) (Count) Gi1/0/20 Shutdown Total Addresses in System (excluding one mac per port) Max Addresses limit in System (excluding one mac per port) : 6272 For more detail, use the show port-security interface command for a specific interface: 3750#sho port-security interface g1/0/20 Port Security : Enabled Port Status : Secure-down Violation Mode : Shutdown Aging Time : 0 mins Aging Type : Absolute SecureStatic Address Aging : Disabled Maximum MAC Addresses Total MAC Addresses Configured MAC Addresses Sticky MAC Addresses Last Source Address Vlan : 0000.0000.0000:0 Security Violation Count Switched Port Analyzer (SPAN) allows traffic to be replicated to a port from a specified source. The traffic to be replicated can be from physical ports, virtual ports, or VLANs, but you cannot mix source types within a single SPAN session. The most common reason for SPAN to be employed is for packet capture. If you need to capture the traffic on VLAN 10, for example, you can't just plug a sniffer on a port in that VLAN, as the switch will only forward packets destined for the sniffer. However, enabling SPAN with the VLAN as the source, and the sniffer's port as the destination, will cause all traffic on the VLAN to be sent to the sniffer. SPAN is also commonly deployed when Intrusion Detection Systems (IDSs) are added to a network. IDS devices need to read all packets in one or more VLANs, and SPAN can get the packets to the IDS devices. Using Remote Switched Port Analy