Cisco SPS208G User Manual

Network Security
Port Security
SPS208G/SPS224G4/SPS2024 Service Provider Switches User Guide 126
7
• Lock Interface — Indicates the port security status. The possible field values
are:
- Checked — Indicates that the port is currently locked.
- Unchecked — Indicates that the port is currently unlocked. This is the
default value.
• Learning Mode — Defines the locked port type. The Learning Mode field is
enabled only if Unlocked is selected in the Interface Status field. The
possible field values are:
- Classic Lock — Locks the port using the classic lock mechanism. The
port is immediately locked, regardless of the number of addresses that
have already been learned.
- Limited Dynamic Lock — The device learns MAC addresses up to the
maximum addresses allowed on the port, after which any new MAC is
considered unauthorized. Both relearning and aging MAC addresses are
enabled.
In order to change the Learning Mode, the Lock Interface must be set to
Unlocked (unchecked). Once the mode is changed, the Lock Interface can
be reinstated.
• Max Entries — Specifies the number of MAC addresses that can be learned
on the port. The Max Entries field is enabled only if
Locked is selected in the
Locked Interface field, and if the
Limited Dynamic Lock mode is selected in
the Learning Mode. The default is 1.
• Action on Violation — Indicates the action to be applied to packets arriving
on a locked port. The possible field values are:
- Discard — Discards packets from any unlearned source. This is the
default value.
- Forward — Forwards packets from an unknown source without learning
the MAC address.
- Shutdown — Discards packets from any unlearned source and shuts
down the port. The port remains shut down until reactivated, or until the
device is reset.

Cisco SPS208G Specifications

General

Brand	Cisco
Model	SPS208G
Category	Switch
Language	English