D-Link DES-3326S - Page 42

D-Link DES-3326S Layer 3 Switch CLI Reference
config port_security
Purpose Used to configure port lock settings.
Syntax
config port_security
<portlist>|all
admin_state [enable|disable]
max_learning_addr <max_lock_no 0-10>
lock_address_mode [Permanent|DeleteOnTimout|DeleteOnReset]
Description
This command allows for the configuration of the port lock
security feature. Only the ports listed in the <portlist> are
effected.
Parameters
all − configure port lock for all ports on the Switch.
portlist − specifies a range of ports to be configured. The port list is
specified by listing the lowest Switch number and the beginning port
number on that Switch, separated by a colon. Then highest Switch
number, and the highest port number of the range (also separeted by
a colon) are specified. The beginning and end of the port list range
are seperated by a dash. For example, 1:3 would specify Switch
number 1, port 3. 2:4 specifies Switch number 2, port 4. 1:3-2:4
specifies all of the ports between Switch 1, port 3 and Switch 2, port 4
− in numerical order.
admin_state [enable|disaled] – enable or disable port lock for the
listed ports.
max_learning_addr <1-10> - use this to limit the number of MAC
addresses dynamically listed in the FDB for the ports.
lock_address_mode[Permanent|DeleteOnTimout|DeleteOnReset] –
The options for clearing the aging out locked addresses for the port
are as follows:
Permanent – Locked MAC addresses do not age out. MAC
addresses retain locked status even if the Switch is restarted.
DeleteOnTimeout – Removes locked MAC addresses upon aging out
of the FDB. MAC address aging is set using FDB commands. (See
config fdb aging_time in Forwarding Database Commands).
DeleteOnReset – Locked MAC addresses do not age out. If the
Switch is restarted reset, the MAC addresses will no longer have
locked status. Any previously learned addresses will need to be
relearned.
Restrictions Only administrator-level users can issue this command.
36