Cisco ESW 500 Administration Manual page 144

Configuring Device Security
Defining Traffic Control
STEP 2
STEP 3
ESW 500 Series Switches Administration Guide
-
Classic Lock
port is immediately locked, regardless of the number of addresses that
have already been learned.
-
Limited Dynamic Lock
MAC addresses associated with the port. The port learns up to the
maximum addresses allowed on the port. Both relearning and aging
MAC addresses are enabled.
For the port transitioning from classic lock to limited dynamic lock,
NOTE
previously learned MAC addresses are not deleted but are converted
to a static MAC address.
•
Max Entries — Specifies the number of MAC addresses that can be learned on
the port. The Max Entries field is enabled only if Locked is selected in the
Interface Status field. In addition, the Limited Dynamic Lock mode is selected.
The possible range is 1-128. The default is 1.
•
Action — Indicates the action to be applied to packets arriving on a locked
port. The possible field values are:
-
Discard
— Discards packets from any unlearned source. This is the
default value.
-
Forward
— Forwards packets from an unknown source without learning
the MAC address.
-
Shutdown
— Discards packets from any unlearned source and shuts
down the port. The port remains shut down until reactivated, or until the
device is reset.
•
Trap — Enables traps when a packet is received on a locked port. The possible
field values are:
-
Enable
— Enables traps.
-
Disable
— Disables traps.
•
Trap Frequency (Sec) — Displays the amount of time (in seconds) between
traps. The default value is 10 seconds.
Define the relevant fields.
Click Apply. Port security is defined, and the device is updated.
— Locks the port using the classic lock mechanism. The
— Locks the port by deleting the current dynamic
5
133