Send documentation comments to mdsfeedback-doc@cisco.com
18-17
Cisco MDS 9000 Family Command Reference
OL-8413-07, Cisco MDS SAN-OS Release 3.x
Chapter 18 P Commands
port-security
Command History
Usage Guidelines When you activate the port security feature, the auto-learn option is also automatically enabled. You
can choose to activate the port-security feature and disable autolearn using the port-security activate
vsan number no-auto-learn command. In this case, you need to manually populate the port security
database by individually securing each port.
If the auto-learn option is enabled on a VSAN, you cannot activate the database for that VSAN without
the force option.
Examples The following example activates the port security database for the specified VSAN, and automatically
enables autolearning.
switch# config terminal
switch(config)# port-security activate vsan 1
The following example deactivates the port security database for the specified VSAN, and automatically
disables auto-learn.
switch# config terminal
switch(config)# no port-security activate vsan 1
The following example disables the auto-learn feature for the port security database in VSAN 1.
switch# config terminal
switch(config)# port-security activate vsan 1 no-auto-learn
The following example enables auto-learning so the switch can learn about any device that is allowed to
access VSAN 1. These devices are logged in the port security active database.
switch# config terminal
switch(config)# port-security auto-learn vsan 1
The following example disables auto-learning and stops the switch from learning about new devices
accessing the switch. Enforces the database contents based on the devices learnt up to this point.
switch# config terminal
switch(config)# no port-security auto-learn vsan 1
The following example enters the port security database mode for the specified VSAN.
switch# config terminal
switch(config)# port-security database vsan 1
switch(config-port-security)#
The following example configures any WWN to login through the specified interfaces.
switch(config-port-security)# any-wwn interface fc1/1 - fc1/8
The following example configures the specified pWWN to only log in through the specified fWWN.
switch(config-port-security)# pwwn 20:11:00:33:11:00:2a:4a fwwn 20:81:00:44:22:00:4a:9e
The following example deletes the specified pWWN configured in the previous step.
Release Modification
1.2(1) This command was introduced.
2.0(x) Add the optional swwn keyword to the subcommands under the
port-security database vsan command.
To Next Page
Loading...
Need help?
General
