960 BigIron RX Series Configuration Guide
53-1002253-01
Displaying MAC Port Security information
32
Displaying information when violation action is restrict
To determine what MAC addresses were denied access when the violation mode is set to restrict,
enter the following command.
Syntax: show port security denied-macs [ethernet <slot>/<port> ]
Enter a value for ethernet <slot>/<port> if you want the MAC addresses that were denied for one
interface when the violation action is restrict.
Displaying information when violation action is deny
To determine what MAC addresses have been denied at the global level when violation action is set
to deny, enter the following command.
TABLE 156 Output from the show port security mac command
This field... Displays...
Ports The ID of the interface
Count The total number of times the secure or denied MAC address was received on
the interface.
Secure-Addr (S)
Deny-Addr (D)
The secure or denied MAC address that was received on the interface. Secure
MAC addresses are labeled with (S), while denied MAC addresses are labeled
with (D).
VLAN The VLAN on which the MAC address was received.
Age left Amount of time left before the address ages out. After the age timer expires,
the MAC address is removed from secure or deny list.
TABLE 157 Output from the show port security denied-macs command
This field... Displays...
Ports The ID of the interface
Count The total number of times the MAC address was received on the interface.
Deny-Src-Addr The MAC address that was received on the interface.
VLAN The VLAN on which the denied MAC address was received.
Age How long the address has been denied access to the interface.
Age left Amount of time left before the address ages out. After the age timer expires
MAC address is removed from the deny list.
BigIron RX# show port security denied-macs ethernet 2/1
Total denied macs for port 2/1: 1
Port Count Deny-Src-Addr Vlan Age AgeLeft
----- ----- --------------- ---- ---- -------
2/1 1 0003.0019.0050 1200 5 0