C613-50631-01 Rev A Command Reference for IE340 Series 629
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
SWITCHING COMMANDS
SWITCHPORT
PORT-SECURITY VIOLATION
switchport port-security violation
Overview Use this command to set the action taken on a switch port when the port exceeds
the port-security learning limits.
The action can be shutdown, restrict or protect:
• shutdown: the physical link will be disabled and ‘shutdown’ will be shown
in the configuration file.
• restrict: the packet from the unauthorized MAC will be discarded and an
SNMP trap will be generated to alert management.
• protect: the packet will simply be discarded silently.
Use the no variant of this command to set the violation action to the default action
of protect.
Syntax
switchport port-security violation {shutdown|restrict|protect}
no switchport port-security violation
Mode Interface Configuration for a switchport.
Default Protect
Usage notes When modes restrict or shutdown are used, the administrator can also be alerted
via an SNMP trap. To configure this, add the following command to the SNMP
configuration:
awplus(config)# snmp-server enable trap nsm
Examples To set the action to be shutdown on port1.0.2, use the following commands:
awplus# configure terminal
awplus(config)# interface port1.0.2
awplus(config-if)# switchport port-security violation shutdown
To set the port-security action to the default (protect) on port1.0.2, use the
following commands:
awplus# configure terminal
awplus(config)# interface port1.0.2
awplus(config-if)# no switchport port-security violation
Parameter Description
shutdown Disable the port.
restrict Discard and alert the network administrator.
protect Discard the packet.