xStack
®
DGS-3120 Series Managed Switch CLI Reference Guide
543
DGS-3120-24TC:admin# config port_security system max_learning_addr 256
Command: config port_security system max_learning_addr 256
Success.
56-2 config port_security ports
Description
This command is used to configure the admin state, the maximum number of addresses that can
be learnt and the lock address mode.
There are four levels that limit the number of learned entries; the entire system, a port, a VLAN,
and a specific VLAN on a port. If any limitation is exceeded, the new entry will be discarded.
Format
config port_security ports [<portlist> | all] [{admin_state [enable | disable] |
max_learning_addr <max_lock_no 0-3072> | lock_address_mode [permanent |
deleteontimeout | deleteonreset]} (1)| {vlan [<vlan_name 32> | vlanid <vidlist>]
max_learning_addr [<max_lock_no 0-3072> | no_limit]}(1)]
Parameters
ports - Specify the range of ports to be configured.
<portlist> - Enter the list of port used for this configuration here.
all - Specify that all ports will be configured.
admin_state - (Optional) Specify the state of the port security function on the port.
enable - Specify to enable the port security function on the port.
disable - Specify to disable the port security function on the port. By default, the setting is
max_learning_addr - (Optional) Specify the maximum number of port security entries that can
be learned on this port. If the value is set to 0, it means that no user can be authorized by the
port security function on this port. If the setting is smaller than the number of current learned
entries on the port, the command will be rejected. The default value is 32.
<max_lock_no 0-3072> - Enter the maximum number of port security entries that can be
learned here. This value must be between 0 and 3072.
lock_address_mode - (Optional) Indicates the lock address mode. The default mode is
deleteonreset.
permanent - The address will never be deleted unless the user removes it manually, the
VLAN of the entry is removed, the port is removed from the VLAN, or port security is
disabled on the port where the address resides.
deleteontimeout - This entry will be removed if the entry is idle for the specified aging time.
deleteonreset - This address will be removed if the Switch is reset or rebooted. Events that
cause permanent entries to be deleted also apply to the deleteonreset entries.
vlan - (Optional) Specify the VLAN name used here.
<vlan_name 32> - Enter the VLAN name used here. This name can be up to 32 characters
long.
vlanid - (Optional) Specify the VLAN ID used here.
<vidlist> - Enter the VLAN ID used here.
max_learning_addr - (Optional) Specify the maximum learning address value.
<max_lock_no 0-3072> - Enter the maximum learning address value here. This value must
be between 0 and 3072.
no_limit - Specify that the maximum learning address value will be set to no limit.
To Next Page
Loading...
