Port Security Commands 103
2 Switching Commands
Interfaces The list of interfaces that are designated for forwarding (Fwd:) and filtering
(Flt:).
Port Security Commands
This section describes the command you use to configure Port Security on the switch. Port
security, which is also known as port MAC locking, allows you to secure the network by
locking allowable MAC addresses on a given port. Packets with a matching source MAC
address are forwarded normally, and all other packets are discarded.
NOTE: To enable the SNMP trap specific to port security, see “snmp-server enable
traps violation” on page 312.
port-security
This command enables port locking at the system level (Global Config) or port level (Interface
Config)
Default disabled
Format
port-security
Modes Global Config
Interface Config
no port-security
This command disables port locking for one (Interface Config) or all (Global Config) ports.
Format
no port-security
Modes Global Config
Interface Config
port-security max-dynamic
This command sets the maximum number of dynamically locked MAC addresses allowed on a
specific port.
Default 600
Format
port-security max-dynamic <maxvalue>
Mode Interface Config
no port-security max-dynamic
This command resets the maximum number of dynamically locked MAC addresses allowed
on a specific port to its default value.
Format
no port-security max-dynamic
Mode Interface Config
To Next Page
Loading...
