C613-50631-01 Rev A Command Reference for IE340 Series 623
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
SWITCHING COMMANDS
SWITCHPORT
PORT-SECURITY
switchport port-security
Overview Use this command to enable the port-security feature. This feature is also known
as the port-based learn limit. It allows you to set the maximum number of MAC
addresses that each port can learn (using the switchport port-security maximum
command).
Use the no variant of this command to disable the port-security feature.
Syntax
switchport port-security
no switchport port-security
Mode Interface Configuration for a switchport.
Usage notes After using this command to turn on port-security, use the following commands to
configure it:
• switchport port-security maximum to set the number of MAC addresses that
can be learned
• switchport port-security aging (optional) to choose whether to limit it to
specific devices, or to allow any devices up to the limit
• switchport port-security violation (optional) to change the action the switch
takes if the limit is violated.
If the switch sees a new MAC address on a port that has port-security enabled, and
the MAC address is statically configured for another port, this triggers a violation.
The switch will ignore the maximum learn limit and will treat that MAC address as
an intruder.
Examples To enable the port-security feature on port1.0.2 and set it to learn 1 MAC address,
use the following commands:
awplus# configure terminal
awplus(config)# interface port1.0.2
awplus(config-if)# switchport port-security
awplus(config-if)# switchport port-security maximum 1
To disable the port-security feature on port1.0.2, use the following commands:
awplus# configure terminal
awplus(config)# interface port1.0.2
awplus(config-if)# no switchport port-security