Configuring Learned Port Security Configuring Learned Port Security
OmniSwitch AOS Release 7 Network Configuration Guide June 2013 page 31-11
Enabling LPS Functionality on a Port
By default, LPS is disabled on all switch ports. To enable LPS on a port, use the port-security command.
with the admin-state enable parameter. For example, the following command enables LPS on port 1/4:
-> port-security port 4/1 admin-state enable
To enable LPS on multiple ports, specify a range of ports. For example:
-> port-security port 4/1-5 admin-state enable
-> port-security port 5/12-20 admin-state enable
Note. When LPS is enabled on an active port, all MAC addresses learned on that port prior to the time
LPS was enabled are cleared from the source learning MAC address table.
Disabling LPS Functionality on a Port
To disable LPS on a port, use the port-security command with the admin-state disable parameter. For
example, the following command disables LPS on a range of ports:
-> port-security 5/21-24 admin-state disable
To disable all the LPS ports on a chassis, use the port-security chassis admin-state command, as shown:
-> port-security chassis admin-state disable
When LPS is disabled on a port, the MAC address entries for that port are retained in the LPS table. The
next time LPS is enabled on the port, the same LPS table entries become active again. If there is a switch
reboot before the switch configuration is saved, however, dynamic MAC address entries are discarded
from the table.
Locking the LPS Port
To lock the LPS port, use the port-security command with the admin-state locked parameter. For exam-
ple, the following command locks port 5/21:
-> port-security 5/21 admin-state locked
When the LPS port is locked, all learning on the port is stopped.
Removing the LPS Configuration from the Port
Use the no form of the port-security command to remove the LPS configuration and clear all entries
(configured and dynamic) in the LPS table for the specified port. For example:
-> no port-security port 5/10
After LPS is removed, all the dynamic and static MAC addresses are flushed and unrestricted learning of
new MAC addresses is enabled.
To Next Page
Loading...
Need help?
General