> # Information About Port Security

> All switches in the Cisco MDS 9000 Family provide port security features that reject intrusion attempts and report these intrusions to the administrator.

> Typically, any Fibre Channel device in a SAN can attach to any SAN switch port and access SAN services based on zone membership. Port security features prevent unauthorized access to a switch port in the Cisco MDS 9000 Family in the following ways:

> - Login requests from unauthorized Fibre Channel devices (Nx ports) and switches (xE ports) are rejected.
> - All intrusion attempts are reported to the SAN administrator through system messages.
> - Configuration distribution uses the CFS infrastructure, and is limited to those switches that are CFS capable. Distribution is disabled by default.
> - Configuring the port security policy requires the ENTERPRISE_PKG license (see the Cisco MDS 9000 Family NX-OS Licensing Guide).

> This section includes the following topics:

> - Port Security Enforcement
> - About Auto-Learning
> - Port Security Activation
> - Database Activation Rejection
> - About Enabling Auto-learning
> - Auto-learning Device Authorization
> - Authorization Scenarios
> - About WWN Identification
> - Activation and Auto-learning Configuration Distribution
> - Database Interaction

> Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.