Cisco IE-4000 Software Configuration Manual page 466

Configuring Port-Based Traffic Control
Configuration Examples for Port-Based Traffic Control
Enabling Small-Frame Arrival Rate: Example
This example shows how to enable the small-frame arrival-rate feature, configure the port recovery time, and configure
the threshold for error-disabling a port:
Switch# configure terminal
Switch# errdisable detect cause small-frame
Switch# errdisable recovery cause small-frame
Switch(config)# interface GigabitEthernet1/17
Switch(config-if)# small-frame violation rate 10000
Switch(config-if)# end
Configuring a Protected Port: Example
This example shows how to configure a port as a protected port:
Switch# configure terminal
Switch(config)# interface GigabitEthernet1/17
Switch(config-if)# switchport protected
Switch(config-if)# end
Blocking Flooding on a Port: Example
This example shows how to block unicast and Layer 2 multicast flooding on a port:
Switch# configure terminal
Switch(config)# interface GigabitEthernet1/17
Switch(config-if)# switchport block multicast
Switch(config-if)# switchport block unicast
Switch(config-if)# end
Configuring Port Security: Examples
This example shows how to enable port security on a port and to set the maximum number of secure addresses to 50.
The violation mode is the default, no static secure MAC addresses are configured, and sticky learning is enabled:
Switch(config)# interface GigabitEthernet1/17
Switch(config-if)# switchport mode access
Switch(config-if)# switchport port-security
Switch(config-if)# switchport port-security maximum 50
Switch(config-if)# switchport port-security mac-address sticky
This example shows how to configure a static secure MAC address on VLAN 3 on a port:
Switch(config)# interface GigabitEthernet1/18
Switch(config-if)# switchport mode trunk
Switch(config-if)# switchport port-security
Switch(config-if)# switchport port-security mac-address 0000.02000.0004 vlan 3
This example shows how to enable sticky port security on a port, to manually configure MAC addresses for data VLAN
and voice VLAN, and to set the total maximum number of secure addresses to 20 (10 for data VLAN and 10 for voice
VLAN).
Switch(config)# interface FastEthernet1/1
Switch(config-if)# switchport access vlan 21
Switch(config-if)# switchport mode access
Switch(config-if)# switchport voice vlan 22
Switch(config-if)# switchport port-security
Switch(config-if)# switchport port-security maximum 20
462