Chapter 33 Configuring Learned Port Security - Alcatel-Lucent OmniSwitch 9900 Series Network Configuration Manual

33 Configuring Learned
Learned Port Security (LPS) provides a mechanism for authorizing source learning of MAC addresses on
Ethernet ports. The only types of Ethernet ports that LPS does not support are link aggregate and 802.1Q
trunked link aggregate ports. Using LPS to control source MAC address learning provides the following
benefits:
•
A configurable source learning time limit that applies to all LPS ports.
•
A configurable limit on the number of MAC addresses (bridged and filtered) allowed on an LPS port.
•
Dynamic configuration of a list of authorized source MAC addresses.
•
Static configuration of a list of authorized source MAC addresses.
•
Three methods for handling unauthorized traffic: administratively disable the LPS port, stop all traffic
on the port (port remains up), or only block traffic that violates LPS criteria.
In This Chapter
This chapter provides an over of the LPS feature and describes how to configure LPS parameters through
the Command Line Interface (CLI). CLI commands are used in the configuration examples; for more
details about the syntax of commands, see the OmniSwitch AOS Release 8 CLI Reference Guide.
The following information and procedures are included in this chapter:
•
"Learned Port Security Defaults" on page
•
"Sample Learned Port Security Configuration" on page
•
"Learned Port Security Overview" on page
•
"Interaction With Other Features" on page
•
"Configuring Learned Port Security" on page
•
"Displaying Learned Port Security Information" on page
For more information about source MAC address learning, see
OmniSwitch AOS Release 8 Network Configuration Guide
Port Security
33-2.
33-3.
33-5.
33-9.
33-10.
33-19.
Chapter 3, "Managing Source Learning."
December 2017 page 33-1