xStack
® 
DGS-3120 Series Managed Switch CLI Reference Guide 
544 
 
 
Restrictions 
Only Administrator, Operator and Power-User level users can issue this command. 
 
Example 
To configure the port-based port security setting so that the maximum number of port security 
entries is restricted to 10, and the lock_address mode is set to permanent on port 6: 
DGS-3120-24TC:admin#config port_security ports 1:6 admin_state enable 
max_learning_addr 10 lock_address_mode permanent 
Command: config port_security ports 1:6 admin_state enable max_learning_addr 10 
lock_address_mode permanent 
 
Success. 
 
 
56-3  config port_security vlan 
Description 
This command is used to set the maximum number of port security entries that can be learned on 
a specific VLAN. 
There are four levels that limit the number of learned entries; the entire system, a port, a VLAN, 
and a specific VLAN on a port. If any limitation is exceeded, the new entry will be discarded. 
 
Format 
config port_security vlan [<vlan_name 32> | vlanid <vidlist>] max_learning_addr 
[<max_lock_no 0-3072> | no_limit] 
 
Parameters 
vlan - Specify the VLAN by name. 
<vlan_name 32> - Enter the VLAN name here. This name can be up to 32 characters long. 
vlanid - Specify a list of VLANs by VLAN ID. 
<vidlist> - Enter the VLAN ID list here. 
max_learning_addr - Specify the maximum number of port security entries that can be learned 
by this VLAN. If this parameter is set to 0, it means that no user can be authorized on this 
VLAN. If the setting is lower than the number of current learned entries on the VLAN, the 
command will be rejected. The default value is “no_limit” 
<max_lock_no 0-3072> - Enter the maximum number of port security entries that can be 
learned here. This value must be between 0 and 3072. 
no_limit - No limitation on the number of port security entries that can be learned by a specific 
 
Restrictions 
Only Administrator, Operator and Power-User level users can issue this command.