134
Example: Enable MAC address binding function for port 1and.
Switch(config)#interface Ethernet 1/1
Switch(Config-If-Ethernet1/1)# switchport port security
11.2.8 switchport port-security convert
Command: switchport port-security convert
Function: Converts dynamic secure MAC addresses learned by the port to static secure
MAC addresses, and disables the MAC address learning function for the port.
Command mode: Port Mode.
Usage Guide: The port dynamic MAC convert command can only be executed after the
secure port is locked. After this command has been executed, dynamic secure MAC
addresses learned by the port will be converted to static secure MAC addresses. The
command does not reserve configuration.
Example: Converting MAC addresses in port 1 to static secure MAC addresses.
Switch(config)#interface Ethernet 1/1
Switch(Config-If-Ethernet1/1)# switchport port-security convert
11.2.9 switchport port-security lock
Command: switchport port-security lock
no switchport port-security lock
Function: Lock the port. After the port is locked, the MAC-address learning function will
be shut down; the no operation of this command will reset the MAC-address learning
function.
Command Mode: Port Configuration Mode.
Default: Ports are unlocked.
Usage Guide: Ports can only be locked after the MAC-address binding function is
enabled. When a port becomes locked, its MAC learning function will be disabled.
Examples: Lock port 1.
Switch(config)#interface Ethernet 1/1
Switch(Config-If-Ethernet1/1)#switchport port-security lock
11.2.10 switchport port-security mac-address