C
HAPTER
15
| Security Commands
Port Security Limit Control
– 353 –
EXAMPLE
Security/Network/Limit>limit 2 10
Security/Network/Limit>
security network
limit action
This command configures the response to take when the maximum
number of addresses is reached.
SYNTAX
security network limit action [port-list] [none | trap | shut |
trap_shut]
port-list - A specific port or a range of ports. (Range: 1-28 or all)
none - Do not allow more than the specified Limit of MAC addresses
on the port, but take no further action.
trap - If Limit + 1 MAC addresses is seen on the port, send an
SNMP trap. If Aging is disabled, only one SNMP trap will be sent, but
with Aging enabled, new SNMP traps will be sent every time the
limit is exceeded.
shut - If Limit + 1 MAC addresses is seen on the port, shut down
the port. This implies that all secured MAC addresses will be
removed from the port, and no new addresses will be learned. Even
if the link is physically disconnected and reconnected on the port
(by disconnecting the cable), the port will remain shut down. There
are three ways to re-open the port:
■
Boot the switch,
■
Disable and re-enable Limit Control on the port or the switch,
■
Enter the reopen command.
trap_shut - If Limit + 1 MAC addresses is seen on the port, both
the “trap” and the “shut” actions described above will be taken.
DEFAULT SETTING
All ports
none
EXAMPLE
Security/Network/Limit>action 2 trap
Security/Network/Limit>
To Next Page
