226 Address Table Commands
console#clear bridge
port security
Use the port security command in Interface Configuration mode to disable
the learning of new addresses on an interface. To enable new address learning,
use the no form of the port security command.
Syntax
port security [discard] [trap
seconds
]
no port security
•
discard
— Discards frames with unlearned source addresses. This is the
default if no option is indicated.
•
trap
seconds
— Sends SNMP traps and defines the minimal amount of
time in seconds between two consecutive traps. (Range: 1–1000000)
Default Configuration
Disabled—No port security
Command Mode
Interface Configuration (Ethernet, Port-channel) mode
User Guidelines
When port security is enabled on an interface, all dynamic entries learned up
to that point are flushed, and new entries can be learned only to the limit set
by the port security max command. The default limit is 100 dynamic MAC
addresses.
Example
In this example, frame forwarding is enabled without learning, and with traps
sent every 100 seconds on port g1.
console(config)#interface ethernet 1/g1
console(config-if-1/g1)#port security forward trap
100
To Next Page
Loading...
