AT-9000 Switch Command Line User’s Guide
917
awplus> enable
awplus# configure terminal
awplus(config)# interface port1.0.4,port1.0.5
awplus(config-if)# switchport port-security maximum 25
awplus(config-if)# no switchport port-security aging
awplus(config-if)# switchport port-security violation
protect
This example configures port 16 to learn 45 MAC addresses. The
addresses are stored as dynamic addresses in the table so that inactive
addresses are deleted, permitting the port to learn new addresses. The
intrusion action is set to restrict so that the switch sends SNMP traps if the
port, after learning 45 source MAC addresses, discards packets with
unknown source MAC addresses:
awplus> enable
awplus# configure terminal
awplus(config)# interface port1.0.16
awplus(config-if)# switchport port-security maximum 45
awplus(config-if)# switchport port-security aging
awplus(config-if)# switchport port-security violation
restrict
This example configures ports 8 and 20 to learn up to five MAC addresses
each. The addresses are stored as static addresses in the table, so that
they are never aged out, even when the source nodes are inactive. The
intrusion action is set to Shutdown, which disables the ports if they receive
packets with unknown source packets after they learn five MAC
addresses:
awplus> enable
awplus# configure terminal
awplus(config)# interface port1.0.8,port1.0.20
awplus(config-if)# switchport port-security maximum 5
awplus(config-if)# no switchport port-security aging
awplus(config-if)# switchport port-security violation
shutdown
After configuring the ports, go to “Displaying Port Settings” on page 920 to
confirm the settings before activating port security.
To Next Page
Loading...
Need help?
General
