set maclock firstarrival
SecureStack C2 Configuration Guide 18-53
Defaults
None.
Mode
Switchcommand,read‐write.
Example
ThisexampleshowshowtoresetthenumberofallowablestaticMACsonge.2.3:
C2(rw)->clear maclock static ge.2.3
set maclock firstarrival
UsethiscommandtorestrictMAClockingonaporttoamaximumnumberofendstation
addressesfirstconnectedtothatport.
Syntax
set maclock firstarrival port-string value
Parameters
Defaults
None.
Mode
Switchcommand,read‐write.
Usage
Themaclockfirstarrivalcountresetswhenthelinkgoesdown.Thisfeatureisbeneficialifyou
haveroamingusers—thefirstarrivalcountwillbereseteverytimeausermovestoanotherport,
butwillstillprotectagainstconnectingmultipledevicesonasingleportandwillprotectagainst
MAC
addressspoofing.
Ifyouwishtohaveonlystatically setMACs,setaport’sfirstarrivallimitto0.
Example
ThisexampleshowshowtorestrictMAClock ingto6MACaddressesonge.2.3:
C2(su)->set maclock firstarrival ge.2.3 6
clear maclock firstarrival
UsethiscommandtoresetthenumberoffirstarrivalMACaddressesallowedperporttothe
defaultvalueof600.
port‐string SpecifiestheportonwhichtolimitMAClocking.Foradetailed
descriptionofpossibleport‐stringvalues,referto“PortStringSyntaxUsed
intheCLI”
onpage 5‐2.
value SpecifiesthenumberoffirstarrivalendstationMACaddressestobe
allowedconnectionstotheport.Validvaluesare 0to600.