To Next Page

To Previous Page

Configuring and Monitoring Port Security

MAC Lockdown

The following command serves this purpose by removing 0c0090-123456 and

reducing the Address Limit to 1:

ProCurve(config)# port-security a1 address-limit 1

ProCurve(config)# no port-security a1 mac-address 0c0090-

123456

The above command sequence results in the following configuration for port

A1:

Figure 13-9. Example of Port A1 After Removing One MAC Address

MAC Lockdown

MAC Lockdown, also known as “static addressing,” is the permanent assign-

ment of a given MAC address (and VLAN, or Virtual Local Area Network) to

a specific port on the switch. MAC Lockdown is used to prevent station

movement and MAC address hijacking. It also controls address learning on

the switch. When configured, the MAC Address can only be used on the

assigned port and the client device will only be allowed on the assigned VLAN.

Note Port security and MAC Lockdown are mutually exclusive on a given port. You

can either use port security or MAC Lockdown, but never both at the same

time on the same port.

Syntax: [no] static-mac < mac-addr > vlan < vid > interface < port-number >

13-22

Other manuals for HP PROCURVE 2910AL

Questions and Answers:

Need help?

Do you have a question about the HP PROCURVE 2910AL and is the answer not in the manual?

General