xStack
®
DGS-3120 Series Layer 3 Managed Gigabit Ethernet Switch CLI Reference Guide
761
DGS-3120-24TC:admin# config port_security system max_learning_addr 256
Command: config port_security system max_learning_addr 256
Success.
76-2 config port_security ports
Description
This command is used to configure the admin state, the maximum number of addresses that can
be learnt and the lock address mode.
There are four levels that limit the number of learned entries; the entire system, a port, a VLAN,
and a specific VLAN on a port. If any limitation is exceeded, the new entry will be discarded.
Format
config port_security ports [<portlist> | all] [{admin_state [enable | disable] |
max_learning_addr <max_lock_no 0-3072> | action [drop | shutdown] | lock_address_mode
[permanent | deleteontimeout | deleteonreset]}(1) | {vlan [<vlan_name 32> | vlanid <vidlist>]
max_learning_addr [<max_lock_no 0-3072> | no_limit]}(1)]
Parameters
<portlist> - Enter the list of port used for this configuration.
all - Specify that all ports will be configured.
admin_state - Specify the state of the port security function on the port.
enable - Specify to enable the port security function on the port.
disable - Specify to disable the port security function on the port. By default, the setting is
max_learning_addr - Specify the maximum number of port security entries that can be learned
on this port. If the value is set to 0, it means that no user can be authorized by the port
security function on this port. If the setting is smaller than the number of current learned
entries on the port, the command will be rejected. The default value is 32.
<max_lock_no 0-3072> - Enter the maximum number of port security entries that can be
learned here. This value must be between 0 and 3072.
action - Specify the action to be taken when the number of secure MAC address reaches the
maximum learning on the port.
drop - When the number of secure MAC address reaches the maximum learning on the port,
new entry will be dropped. This is the default setting.
shutdown - When the number of secure MAC address reaches the maximum learning on the
port, the port will be shut down and enter error-disabled state immediately. The port state is
recovered only by enabling the port manually.The shutdown action only applies to port
lock_address_mode - Indicates the lock address mode. The default mode is deleteonreset.
permanent - The address will never be deleted unless the user removes it manually, the
VLAN of the entry is removed, the port is removed from the VLAN, or port security is
disabled on the port where the address resides.
deleteontimeout - This entry will be removed if the entry is idle for the specified aging time.
deleteonreset - This address will be removed if the Switch is reset or rebooted. Events that
cause permanent entries to be deleted also apply to the deleteonreset entries.
vlan - Specify the VLAN name used here.
<vlan_name 32> - Enter the VLAN name used here. This name can be up to 32 characters
To Next Page
Loading...
Need help?
General
