> # Port Security Enforcement

> To enforce port security, configure the devices and switch port interfaces through which each device or switch is connected, and activate the configuration.

> - Use the port world wide name (pWWN) or the node world wide name (nWWN) to specify the Nx port connection for each device.
> - Use the switch world wide name (sWWN) to specify the xE port connection for each switch.

> Each Nx and xE port can be configured to restrict a single port or a range of ports.

> Enforcement of port security policies are done on every activation and when the port tries to come up.

> The port security feature uses two databases to accept and implement configuration changes.

> - Configuration database—All configuration changes are stored in the configuration database.
> - Active database—The database currently enforced by the fabric. The port security feature requires all devices connecting to a switch to be part of the port security active database. The software uses this active database to enforce authorization.

> Copyright 2010-2015, Cisco Systems, Inc. All rights reserved.