C613-50631-01 Rev A Command Reference for IE340 Series 627
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
SWITCHING COMMANDS
SWITCHPORT
PORT-SECURITY MAXIMUM
switchport port-security maximum
Overview Use this command to set the maximum number of MAC addresses that each port
can learn when port-security is enabled on that port.
Use the no variant of this command to unset the maximum number of MAC
addresses that can be learned. This is same as setting the maximum number to 0.
This command also resets the intrusion list table.
Syntax
switchport port-security maximum <0-256>
no switchport port-security maximum
Mode Interface Configuration for a switchport.
Usage notes Before using this command, turn on port-security with the switchport
port-security command.
After using this command to specify the limit, you can use the following
commands for further configuration:
• switchport port-security aging (optional) to choose whether to limit it to
specific devices, or to allow any devices up to the limit
• switchport port-security violation (optional) to change the action the switch
takes if the limit is violated.
If the switch sees a new MAC address on a port that has port-security enabled, and
the MAC address is statically configured for another port, this triggers a violation.
The switch will ignore the maximum learn limit and will treat that MAC address as
an intruder.
Examples To learn 3 MAC addresses on port1.0.2, use the following commands:
awplus# configure terminal
awplus(config)# interface port1.0.2
awplus(config-if)# switchport port-security
awplus(config-if)# switchport port-security maximum 3
To remove the MAC learning limit on port1.0.2, use the following commands:
awplus# configure terminal
awplus(config)# interface port1.0.2
awplus(config-if)# no switchport port-security maximum
Parameter Description
maximum <0-256> Specify the maximum number of addresses to learn.