Configuring Learned Port Security Configuring Learned Port Security
OmniSwitch AOS Release 8 Network Configuration Guide December 2017 page 33-14
The following command disables this option for the learning window:
-> port-security learning-window 30 convert-to-static disable
If the LPS learning window is set to a specific time and the convert-to-static option is enabled, the
convert-to-static option is automatically disabled when the learning window time is set to zero. For
example:
-> port-security learning-window 10 convert-to-static enable
-> show port-security learning-window
Learning-Window = 10 min,
Convert-to-static = ENABLE,
No Aging = DISABLE,
Boot Up = ENABLE,
Learn As Static = DISABLE,
Mac Move = DISABLE,
Remaining Learning Window = 594 sec,
-> port-security learning-window 0
-> show port-security learning-window
Learning-Window = INFINITY,
Convert-to-static = DISABLE,
No Aging = DISABLE,
Boot Up = ENABLE,
Learn As Static = DISABLE,
Mac Move = DISABLE
Learning MAC Addresses as Static MAC Addresses
If a switch reboots during an active LPS learning window, MAC addresses learned up to that point are
lost. To prevent this from happening, use the learn-as-static enable parameter option with the port-
security learning-window command.
When this option is enabled, all MAC addresses are automatically learned as static MAC addresses during
the learning window time period. These static MAC addresses are saved to the switch configuration.
By default, the option to learn MAC addresses as static MAC addresses is disabled. To enable this option
for the learning window, use the following command:
-> port-security learning-window 30 learn-as-static enable
The following command disables this option for the learning window:
-> port-security learning-window 30 learn-as-static disable
Configuring the MAC Movement Status
MAC addresses are learned as pseudo-static MAC addresses when the no-aging option is enabled for the
LPS learning window. If a duplicate pseudo-static MAC address is seen on another port in the same
VLAN, the MAC address is dropped. To prevent this from happening, use the mac-move enable
parameter option with the port-security learning-window command.
When MAC movement is enabled, a pseudo-static MAC address can move to another port within the same
VLAN without getting dropped. After the move has occurred, the switch configuration is updated to
reflect the new port association for the pseudo-static MAC address. No information about the original port
association is retained.
To Next Page
Loading...
