Chapter 70 Port Security
OLT2406 User’s Guide
505
70.3 Port Security Command Examples
Activate port-security on the OLT and on PON port GE-5-1 (slot 5, PON port 1). Use “ge” for a PON or
Gigabit Ethernet port. Use “msc” for an uplink port. Then limit the number of (dynamic) MAC addresses
subscriber port GE-5-1 can learn to 100.
Activate learning mode on PON port GE-5-1 (slot 5, PON port 1). Use “ge” for a PON or Gigabit Ethernet
port. Use “msc” for an uplink port.
port-security <aid> address-limit
<number>
Limits the number of (dynamic) MAC addresses
that may be learned on the specified ports.
aid: <msc|ge|pon>-<slot>-<port>
number: msc port: 0-8191
ge/pon port: 0-1023
C13
port-security <aid> learn inactive
Disables MAC address learning for the specified
port.
aid: <msc|ge|pon>-<slot>-<port>
C13
no port-security <aid> learn
inactive
Enables MAC address learning for specified port.
aid: <msc|ge|pon>-<slot>-<port>
C13
port-security <aid> MAC-freeze
Adds learned MAC addresses to the static table
and stops the specified port from learning new
MAC addresses.
aid: <msc|ge|pon>-<slot>-<port>
C13
show port-security
Displays the port security settings. E 3
show port-security <aid>
Displays the port security settings of a specified
OLT, MSC, or GE port.
aid: <msc|ge|pon>-<slot>-<port>
E3
show privilege
Displays the current privilege level.
It shows the current login level privilege or the
privilege changed via an enable command for
the current CLI session.
E0
Table 255 Port Security Commands (continued)
COMMAND DESCRIPTION M P
OLT2406#config
OLT2406(config)# port-security
OLT2406(config)# port-security ge-5-1
OLT2406(config)# port-security ge-5-1 address-limit 256
OLT2406#config
OLT2406(config)# no port-security ge-5-1 learn inactive