Filter
Top Products
xStack® DGS-3420 Series Layer 2 Managed Stackable Gigabit Switch CLI Reference Guide
635
Chapter 64
Port Security
Commands
config port_security ports [<portlist> | all] [{admin_state [enable | disable] | max_learning_addr
<max_lock_no 0-3328> | lock_address_mode [permanent | deleteontimeout |
deleteonreset]}(1) | {vlan [<vlan_name 32> | vlanid <vidlist>] max_learning_addr
[<max_lock_no 0-3328> | no_limit]}(1)]
config port_security system max_learning_addr [<max_lock_no 1-3328> | no_limit]
config port_security vlan [<vlan_name 32> | vlanid <vidlist>] max_learning_addr [<max_lock_no
0-3328> | no_limit]
delete port_security_entry [vlan <vlan_name 32> | vlanid <vlanid 1-4094>] mac_address
<macaddr>
clear port_security_entry {ports [<portlist> | all] | {[vlan <vlan_name 32> | vlanid <vidlist>]}}
show port_security_entry {ports {<portlist>} {[vlan <vlan_name 32> | vlanid <vidlist>]}}
show port_security {ports {<portlist>} {[vlan <vlan_name 32> | vlanid <vidlist>]}}
config port_security log state [enable | disable]
config port_security trap state [enable | disable]
64-1 config port_security ports
Description
This command is used to set the port’s state, maximum supported MAC address entries, the
default entry type, and set the maximum port-security entries that can be learned with a specific
VLAN on a specific port. There are four levels of limitations on the learned entry number, for the
entire system, for a port, for a VLAN, and for specific VLAN on a port. If any limitation is exceeded,
the new entry will be discarded.
Format
config port_security ports [<portlist> | all] [{admin_state [enable | disable] |
max_learning_addr <max_lock_no 0-3328> | lock_address_mode [permanent |
deleteontimeout | deleteonreset]}(1) | {vlan [<vlan_name 32> | vlanid <vidlist>]
max_learning_addr [<max_lock_no 0-3328> | no_limit]}(1)]
Parameters
<portlist> - Specify a range of ports to be configured.
all - Specify that all ports will be configured.
admin_state - Allow the port security to be enabled or disabled for the ports specified in the port
list. The default setting is disabled.
enable - Enable port security for the ports specified in the port list.
disable - Disable port security for the ports specified in the port list.
max_learning_addr - Specify the maximum of MAC address entries that can be learned on this
port. If the value is set to 0, it means that no user can get authorized by the port security
function on this port. If the setting is smaller than the number of current learned entries on the
port, the command will be rejected. The default value is 32.
<max_lock_no 0-3328> - Specify the value between 0 and 3328.
lock_address_mode - Indicate locking address mode. The default mode is deleteonreset.
permanent - The address will never be deleted unless the user removes it manually or the