What's the advantage of port security?

Port security function allows the packets to enter the switch port by the source MAC address, source MAC+IP address or source IP address. You can control the packets by setting the specific MAC address statically, static IP+MAC binding or IP binding, or dynamically learning limited MAC addresses. The port with port security enabled is named as secure port. Only the packets with the source MAC address in the port security address table, or IP+MAC binding configured, or IP binding configured, or the learned MAC address,can join the switch communication, while other packets are dropped.  
Requirements
1. You can only connect PC1 （IP: 192.168.1.1，MAC: 0021.CCCF.6F70)  to port F0/1 . If you connect PC1 to other ports, PC1 cannot access the network.
If other PCs connect port F0/1 , they cannot access the network neither.
2. Port F0/2 can only foward traffic of PC (IP=192.168.1.2, MAC=any) to the network.
Network Topology



Configuration Tips
Enable Port security on port F0/1 and F0/2, then set port security maximun value to 1.
Configuration Steps
Configuring Core switch:

• Assign IP address to Vlan 10 which is user gateway.
  

Ruijie(config)#interface vlan 10
Ruijie(config-if-VLAN 10)#ip address 192.168.1.254 255.255.255.0

• Save configuration
  

Ruijie(config-if-VLAN 10)#end
Ruijie#wr
Configuring Access switch:

• Enable port security on interface F0/1 to allow the PC (IP = 192.168.1.1 VLAN=10, MAC=0021.cccf.6f70) to access network.
  

Ruijie(config-if-VLAN 10)#end
Ruijie#configure terminal
Ruijie(config)#interface fastEthernet 0/1                                   
Ruijie(config-if-FastEthernet 0/1)#switchport port-security binding 0021.CCCF.6F70 vlan 10 192.168.1.1  
Ruijie(config-if-FastEthernet 0/1)#switchport port-security   ------>enable Port Security
Ruijie(config-if-FastEthernet 0/1)#exit
2.Enable port security on interface F0/2 to allow the PC (IP = 192.168.1.1 VLAN=10, MAC=any) to access network.
Ruijie(config)#interfac fastEthernet 0/2
Ruijie(config-if-FastEthernet 0/2)# switchport port-security binding 192.168.1.2  ------>binding ip address 192.168.1.2 to interface f0/2
Ruijie(config-if-FastEthernet 0/2)#switchport port-security   ------>enable port security
3.Save Configuration
Ruijie(config-if-FastEthernet 0/2)#end
Ruijie#write                  ------>confirm and save
Verification
Display Port security table