Cisco SPS208G User Manual page 126

Network Security
Port Security
SPS208G/SPS224G4/SPS2024 Service Provider Switches User Guide
•
Lock Interface — Indicates the port security status. The possible field values
are:
-
Checked
— Indicates that the port is currently locked.
-
Unchecked
— Indicates that the port is currently unlocked. This is the
default value.
•
Learning Mode — Defines the locked port type. The Learning Mode field is
enabled only if Unlocked is selected in the Interface Status field. The
possible field values are:
-
Classic Lock
— Locks the port using the classic lock mechanism. The
port is immediately locked, regardless of the number of addresses that
have already been learned.
-
Limited Dynamic Lock
maximum addresses allowed on the port, after which any new MAC is
considered unauthorized. Both relearning and aging MAC addresses are
enabled.
In order to change the Learning Mode, the Lock Interface must be set to
Unlocked (unchecked). Once the mode is changed, the Lock Interface can
be reinstated.
•
Max Entries — Specifies the number of MAC addresses that can be learned
on the port. The Max Entries field is enabled only if
Locked Interface field, and if the
the Learning Mode. The default is 1.
•
Action on Violation — Indicates the action to be applied to packets arriving
on a locked port. The possible field values are:
-
Discard — Discards packets from any unlearned source. This is the
default value.
-
Forward
— Forwards packets from an unknown source without learning
the MAC address.
-
Shutdown
— Discards packets from any unlearned source and shuts
down the port. The port remains shut down until reactivated, or until the
device is reset.
— The device learns MAC addresses up to the
Limited Dynamic Lock
7
Locked
is selected in the
mode is selected in
126