xStack® DGS-3420 Series Layer 2 Managed Stackable Gigabit Switch CLI Reference Guide
750
Chapter 68
Port Security
Commands
config port_security ports [<portlist> | all] [{admin_state [enable | disable] | max_learning_addr
<max_lock_no 0-3328> | lock_address_mode [permanent | deleteontimeout |
deleteonreset]}(1) | {vlan [<vlan_name 32> | vlanid <vidlist>] max_learning_addr
[<max_lock_no 0-3328> | no_limit]}(1)]
config port_security system max_learning_addr [<max_lock_no 1-3328> | no_limit]
config port_security vlan [<vlan_name 32> | vlanid <vidlist>] max_learning_addr [<max_lock_no
0-3328> | no_limit]
delete port_security_entry [vlan <vlan_name 32> | vlanid <vlanid 1-4094>] mac_address
<macaddr>
clear port_security_entry {ports [<portlist> | all] | {[vlan <vlan_name 32> | vlanid <vidlist>]}}
show port_security_entry {ports {<portlist>} {[vlan <vlan_name 32> | vlanid <vidlist>]}}
show port_security {ports {<portlist>} {[vlan <vlan_name 32> | vlanid <vidlist>]}}
config port_security log state [enable | disable]
config port_security trap state [enable | disable]
68-1 config port_security ports
Description
This command is used to set the port’s state, maximum supported MAC address entries, the default
entry type, and set the maximum port-security entries that can be learned with a specific VLAN on a
specific port. There are four levels of limitations on the learned entry number, for the entire system, for
a port, for a VLAN, and for specific VLAN on a port. If any limitation is exceeded, the new entry will be
discarded.
Format
config port_
security
ports [<por
tlist> | all
] [{admin_state [e
nable | disable] |
max_learni
ng_addr
<max_lock_no 0-3328> | lock_address_mode [permanent | deleteontimeout | deleteonreset]}(1)
| {vlan [<vlan_name 32> | vlanid <vidlist>] max_learning_addr [<max_lock_no 0-3328> |
no_limit]}(1)]
Parameters
<portlist> - Specify a range of ports to be configured.
all - Specify that all ports will be configured.
admin_state - Allow the port security to be enabled or disabled for the ports specified in the port list.
The default setting is disabled.
enable - Enable port security for the ports specified in the port list.
disable - Disable port security for the ports specified in the port list.
max_learning_addr - Specify the maximum of MAC address entries that can be learned on this port.
If the value is set to 0, it means that no user can get authorized by the port security function on
this port. If the setting is smaller than the number of current learned entries on the port, the
To Next Page
Loading...
Need help?
General