1.

Limit the number of Mac address on each port

2.Limit the ac address can acess (Tight security)

Cisco switches has three responses

Protect don't allow the second mac but ignore it

restrict Same as Protect but logs
shutdown

#show mac address-table

#conf t
#int fa0/1-2
#switchport mode access
#switchport port-security maximum 1

to enable the shut down port gointerface of the port

int fa0/1
#shutown
#no shutdown

to leanr only one mac address on one port sticky from switch mac address table

#int range fa0/1-2

#switchport port-security mac-adress sticky
#copy runn to starup