116
Command Mode
Interface Configuration Mode (interface gigabitEthernet / interface range
gigabitEthernet)
Privilege Requirement
Only Admin, Operator and Power User level users have access to these
commands.
Example
Enable the learn-mode-change notification on port 1/0/2:
T1600G-52TS(config)# mac address-table notification global-status
enable
T1600G-52TS(config)# interface gigabitEthernet 1/0/2
T1600G-52TS(config-if)# mac address-table notification
learn-mode-change enable
16.6 mac address-table max-mac-count
Description
The mac address-table max-mac-count command is used to configure the
Port Security. To return to the default configurations, please use no mac
address-table max-mac-count command. Port Security is to protect the
switch from the malicious MAC address attack by limiting the maximum
number of the MAC addresses that can be learned on the port. The port with
Port Security feature enabled will learned the MAC address dynamically.
When the learned MAC address number reaches the maximum, the port will
stop learning. Therefore, the other devices with the MAC address unlearned
can not access to the network via this port.
Syntax
mac address-table max-mac-count { [ max-number
num
] [ mode { dynamic |
static | permanent } ] [ status { forward | drop | disable } ] }
no mac address-table max-mac-count [ max-number | mode | status ]
Parameter
num
—— The maximum number of MAC addresses that can be learned on
the port. It ranges from 0 to 64. By default this value is 64.