Transparent Port Flooding - Dell PowerConnect B-RX Configuration Manual

32
Configuring the MAC port security feature
SYSLOG: Mar 10 17:36:12:<14>3-RW-Core-3, Interface ethernet14/1, state
down - disabled
However, when deny-log-rate is configured,
interface ethernet 14/1
disable
port security
enable
maximum 5
violation restrict 1000
deny-log-rate 4
secure-mac-address 0000.0022.2222 10
secure-mac-address 0000.0022.2223 10
secure-mac-address 0000.0022.2224 10
secure-mac-address 0000.0022.2225 10
secure-mac-address 0000.0022.2226 10
The following Syslog messages are generated.
Mar 10 17:38:51:I:Port security denied pkt: 0000.0022.2224 -> 0000.0011.1111
198.19.1.2 -> 198.19.1.1 [Protocol:114]
Mar 10 17:38:51:I:Port security denied pkt: 0000.0022.2224 -> 0000.0011.1111
198.19.1.2 -> 198.19.1.1 [Protocol:114]
Mar 10 17:38:51:I:Port security denied pkt: 0000.0022.2224 -> 0000.0011.1111
198.19.1.2 -> 198.19.1.1 [Protocol:114]
Mar 10 17:38:51:I:Port security denied pkt: 0000.0022.2224 -> 0000.0011.1111
198.19.1.2 -> 198.19.1.1 [Protocol:114]
Mar 10 17:38:51:I:Port security denied pkt: 0000.0022.2224 -> 0000.0011.1111
198.19.1.2 -> 198.19.1.1 [Protocol:114]

Transparent port flooding

When the transparent port flooding feature in enabled for a port, all MAC learning will be disabled
for that port. This will result in all Layer 2 traffic to be flooded to all other ports within the VLAN. The
Transparent port flooding feature is disabled by default. To enable Transparent port flooding, enter
a command such as the following:
BigIron RX (config-if-e1000-15/8)mac-learn-disable
Syntax: [no] mac-learn-disable
Displaying transparent port flooding status
To display if the transparent port flooding feature has been enabled, issue the show interface
ethernet <interface> or show running-configuration command.
Example
10.45.48.50(config-if-e1000-15/8)#mac-learn-disable
10.45.48.50(config-if-e1000-15/8)#show int e 15/8
GigabitEthernet15/8 is down, line protocol is down
Hardware is GigabitEthernet, address is 0004.1234.ffff (bia 0004.1234.ffff)
Configured speed 1Gbit, actual unknown, configured duplex fdx, actual unknown
Configured mdi mode AUTO, actual unknown
Member of L2 VLAN ID 1, port is untagged, port state is Disabled
STP configured to ON, Priority is level0, flow control enabled
Force-DSCP disabled
SA learning is disabled
mirror disabled, monitor disabled
948 BigIron RX Series Configuration Guide
53-1001810-01