set maclock enable
17-54 Security Configuration
set maclock enable
UsethiscommandtoenableMAClockinggloballyorononeormoreports.
Syntax
setmaclockenable[port‐string]
Parameters
Defaults
Ifport‐stringisnotspecified,MAClockingwillbeenabledglobally.
Mode
Switchcommand,read‐write.
Usage
Whenenabledandconfigured,MAClockingdefineswhichMACaddresses,aswellashowmany
MACaddressesarepermittedtousespecificport(s).
MAClockingisdisabledbydefaultatdevicestartup.ConfiguringoneormoreportsforMAC
lockingrequiresgloballyenablingitonthedeviceandthenenablingit
onthedesiredports.
Example
ThisexampleshowshowtoenableMAClockingonfe.2.3:
D2(su)->set maclock enable fe.2.3
Table 17-48 show maclock stations Output Details
Output Field What It Displays...
Port Number Port designation. For a detailed description of possible port-string values, refer to
“Port String Syntax Used in the CLI” on page 6-1.
MAC address MAC address of the end station(s) locked to the port.
Status Whether the end stations are active or inactive.
State Whether the end station locked to the port is a first arrival or static connection.
Aging When true, FirstArrival MACs that have aged out of the forwarding database will be
removed for the associated port lock.
Note: MAC locking needs to be enabled globally and on appropriate ports for it to function.
port‐string (Optional)EnablesMAClockingonspecificport(s).Foradetailed
descriptionofpossibleport‐stringvalues,referto“PortStringSyntaxUsed
intheCLI”onpage 6‐1.