OmniSwitch AOS Release 8 Network Configuration Guide December 2017 page 33-1
33 Configuring Learned
Port Security
Learned Port Security (LPS) provides a mechanism for authorizing source learning of MAC addresses on
Ethernet ports. The only types of Ethernet ports that LPS does not support are link aggregate and 802.1Q
trunked link aggregate ports. Using LPS to control source MAC address learning provides the following
benefits:
• A configurable source learning time limit that applies to all LPS ports.
• A configurable limit on the number of MAC addresses (bridged and filtered) allowed on an LPS port.
• Dynamic configuration of a list of authorized source MAC addresses.
• Static configuration of a list of authorized source MAC addresses.
• Three methods for handling unauthorized traffic: administratively disable the LPS port, stop all traffic
on the port (port remains up), or only block traffic that violates LPS criteria.
In This Chapter
This chapter provides an over of the LPS feature and describes how to configure LPS parameters through
the Command Line Interface (CLI). CLI commands are used in the configuration examples; for more
details about the syntax of commands, see the OmniSwitch AOS Release 8 CLI Reference Guide.
The following information and procedures are included in this chapter:
• “Learned Port Security Defaults” on page 33-2.
• “Sample Learned Port Security Configuration” on page 33-3.
• “Learned Port Security Overview” on page 33-5.
• “Interaction With Other Features” on page 33-9.
• “Configuring Learned Port Security” on page 33-10.
• “Displaying Learned Port Security Information” on page 33-19.
For more information about source MAC address learning, see Chapter 3, “Managing Source Learning.”
To Next Page
Loading...
Need help?
General
