Table of Contents
Advertisement
25 Configuring Learned
Learned Port Security (LPS) provides a mechanism for authorizing source learning of MAC addresses on
Ethernet ports. The only types of Ethernet ports that LPS does not support are link aggregate and 802.1Q
trunked link aggregate ports. Using LPS to control source MAC address learning provides the following
benefits:
•
A configurable source learning time limit that applies to all LPS ports.
•
A configurable limit on the number of MAC addresses allowed on an LPS port.
•
Dynamic configuration of a list of authorized source MAC addresses.
•
Static configuration of a list of authorized source MAC addresses.
•
Two methods for handling unauthorized traffic: stopping all traffic on the port or only blocking traffic
that violates LPS criteria.
In This Chapter
This chapter describes how to configure LPS parameters through the Command Line Interface (CLI). CLI
commands are used in the configuration examples; for more details about the syntax of commands, see the
OmniSwitch CLI Reference Guide.
Configuration procedures described in this chapter include:
•
Enabling LPS for a port on
•
Specifying a source learning time limit for all LPS ports on
•
Configuring the maximum number of MAC addresses learned per port on
•
Configuring the maximum number of filtered MAC addresses learned per port on
•
Configuring a list of authorized MAC addresses for an LPS port on
•
Configuring a range of authorized MAC addresses for an LPS port on
•
Selecting the security violation mode for an LPS port on
•
Displaying LPS configuration information on
For more information about source MAC address learning, see
OmniSwitch AOS Release 7 Network Configuration Guide
page
25-9.
page
25-13.
March 2011
Port Security
page
25-10.
page
25-11.
page
25-12.
page
25-12.
page
25-12.
Chapter 3, "Managing Source Learning."
page
25-11.
page 25-1
Advertisement
Table of Contents
