Configuring and Monitoring Port Security
Port Security
Syntax: port-security (Continued)
action < none | send-alarm | send-disable >
Specifies whether an SNMP trap is sent to a network
management station when Learn Mode is set to
static and
the port detects an unauthorized device, or when Learn
Mode is set to continuous and there is an address change
on a port.
none: Prevents an SNMP trap from being sent. none
is the
default value.
send-alarm: Sends an intrusion alarm. Causes the switch to
send an SNMP trap to a network management station.
send-disable: Sends alarm and disables the port. Available
only in the static, port-access, configured, or
limited learn-modes.
Causes the switch to send an SNMP trap to a network
management station and disable the port. If you
subsequently re-enable the port without clearing the port’s
intrusion flag, the port will block further intruders, but
the switch will not disable the port again until you reset
the intrusion flag. See the Note
on 11-34.
For information on configuring the switch for SNMP
management, refer to the Management and Configuration
Guide for your switch.
clear-intrusion-flag
Clears the intrusion flag for a specific port. (See “Reading
Intrusion Alerts and Resetting Alert Flags” on page
11-32.)
no port-security <port-list> mac-address <mac-addr> [<mac-addr>
<mac-addr>]
Removes the specified learned MAC address(es) from the
specified port.
11-15
To Next Page
Loading...
Need help?
General