D-Link DXS-3600 Series Cli Reference Manual page 993

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
•
Restrict - A port security violation restricts data and causes the security violation counter to
increment.
•
Shutdown - The interface is disabled, based on errors, when a security violation occurs.
Example
This example shows how to configure the port security mode to be permanent, specifying that a
maximum of 5 secure MAC addresses are allowed on the port.
Switch# configure terminal
Switch(config)# interface ethernet 1/0/1
Switch(config-if)# switchport port-security mode permanent
Switch(config-if)# switchport port-security maximum 5
Switch(config-if)#
This example shows how to manually add the secure MAC addresses 00-00-12-34-56-78 with VID 5 at
interface Ethernet 1/0/1.
Switch# configure terminal
Switch(config)# interface ethernet 1/0/1
Switch(config-if)# switchport port-security mac-address 00-00-12-34-56-78 vlan 5
Switch(config-if)#
This example shows how to configure the switch to drop all packets from the insecure hosts at the port-
security process level and increment the security violation counter if a security violation is detected.
Switch# configure terminal
Switch(config)# interface ethernet 1/0/1
Switch(config-if)# switchport port-security violation restrict
Switch(config-if)#
78-5 switchport port-security aging
This command is used to configure the aging time for auto-learned dynamic secure addresses on an
interface. Use the no form of the command to reset to the default setting.
switchport port-security aging {time MINUTES | type {absolute | inactivity}}
no switchport port-security aging {time | type}
Parameters
MINUTES
type
absolute
inactivity
Default
Specifies the aging time for the auto-learned dynamic secured address
on this port. Its range is from 1 to 1440 in minutes.
Specifies to set the aging type.
Specifies to set absolute aging type. All the secure addresses on this
port age out exactly after the time specified and is removed from the
secure address list. This is the default type.
Specifies to set the inactivity aging type. The secure addresses on this
port age out only if there is no data traffic from the secure source
address for the specified time period.
988