Learned Port Security Commands
page 19-4 OmniSwitch 6250 CLI Reference Guide November 2009
port-security shutdown
Configures the amount of time in minutes to allow source learning on all LPS ports. This LPS parameter
applies to the entire switch, so when the time limit expires, source learning of new MAC addresses is
stopped on all LPS ports. Only configured authorized MAC addresses are still allowed on LPS ports after
this timer expires. This command also enables or disables the conversion of dynamic MAC addresses to
static MAC addresses on LPS ports.
port-security shutdown minutes [convert-to-static {enable | disable}]
Syntax Definitions
minutes The number of minutes that defines the amount of time in which LPS
allows source learning across all LPS ports.
enable Enables the conversion of dynamic MAC addresses to static MAC
addresses on the LPS port.
disable Disables the conversion of dynamic MAC addresses to static MAC
addresses on the LPS port.
Defaults
By default, the LPS source learning time limit is not set for the switch.
Platforms Supported
OmniSwitch 6250
Usage Guidelines
• The LPS source learning time window is started and/or reset each time the port-security shutdown
command is issued.
• To automatically start the timer on switch reboot, save this command to the boot.cfg file for the switch.
Each time the switch reboots, the timer is restarted. It is still possible at any time, however, to reset the
timer by issuing the command again.
• Note that the LPS source learning time window has a higher priority over the maximum number of
MAC addresses allowed. For example, if the maximum number of MAC addresses allowed is set at 30
and the learning interval expires when the port has only learned 15, then the port will not learn
anymore MAC addresses.
• If the convert-to-static parameter is enabled and the LPS source learning time window expires, then
all dynamic MAC addresses are converted to static MAC addresses. This stops the MAC addresses
from aging out.
• The conversion of dynamic MAC addresses to static ones does not apply to LPS mobile and authenti-
cated ports.
parameter default
enable | disable disable
To Next Page
Loading...
