set maclock firstarrival
22-64 Authentication and Authorization Configuration
Parameters
Defaults
None.
Mode
Switchcommand,read‐write.
Example
ThisexampleshowshowtoresetthenumberofallowablestaticMACsonge.2.3:
B5(rw)->clear maclock static ge.2.3
set maclock firstarrival
UsethiscommandtorestrictMAClockingonaporttoamaximumnumberofendstation
addressesfirstconnectedtothatport.
Syntax
set maclock firstarrival port-string value
Parameters
Defaults
None.
Mode
Switchcommand,read‐write.
Usage
Themaclockfirstarrivalcountresetswhenthelinkgoesdown.Thisfeatureisbeneficialifyou
haveroamingusers—thefirstarrivalcount willbereseteverytimeausermovestoanotherport,
butwillstillprotectagainstconnectingmultipledevicesonasingleportand willprotectagainst
MAC
addressspoofing.
port‐string SpecifiestheportonwhichtoresetnumberofstaticMACaddresses
allowed.Foradetaileddescriptionofpossibleport‐stringvalues,referto
“PortStringSyntaxUsedintheCLI”onpage 7‐1.
port‐string SpecifiestheportonwhichtolimitMAClocking.Foradetailed
descriptionofpossibleport‐stringvalues,referto“PortStringSyntaxUsed
intheCLI”onpage 7‐1.
value SpecifiesthenumberoffirstarrivalendstationMACaddressestobe
allowedconnectionstotheport.Valid
valuesare0to600.
Note: Setting a port’s first arrival limit to 0 does not deny the first MAC address learned on the port
from passing traffic.