Retention Of Static Addresses - ProCurve 2900 Manual

Configuring and Monitoring Port Security
Port Security
10-16
action < none | send-alarm | send-disable >
Specifies whether an SNMP trap is sent to a network
management station when Learn Mode is set to static and
the port detects an unauthorized device, or when Learn
Mode is set to continuous and there is an address change
on a port.
none: Prevents an SNMP trap from being sent. none is the
default value.
send-alarm: Sends an intrusion alarm. Causes the switch
to send an SNMP trap to a network management station.
send-disable: Sends alarm and disables the port. Available
only in the static, port-access, configured, or limited learn
modes. Causes the switch to send an SNMP trap to a
network management station and disable the port. If you
subsequently re-enable the port without clearing the port's
intrusion flag, the port blocks further intruders, but the
switch will not disable the port again until you reset the
intrusion flag. See the Note on 10-34.
For information on configuring the switch for SNMP
management, refer to the Management and Configuration
Guide for your switch.
—Continued—
clear-intrusion-flag
Clears the intrusion flag for a specific port. (See "Reading
Intrusion Alerts and Resetting Alert Flags" on page
10-32.)
no port-security <port-list> mac-address <mac-addr> [<mac-addr>
<mac-addr>]
Removes the specified learned MAC address(es) from the
specified port.

Retention of Static Addresses

Static MAC addresses do not age-out. MAC addresses learned by using learn-
mode continuous or learn-mode limited-continuous age out according to the
currently configured MAC age time. (For information on the mac-age-time
command, refer to the chapter titled "Interface Access and System Informa­
tion" in the Management and Configuration Guide for your switch.
Learned Addresses. In the following two cases, a port in Static learn mode
retains a learned MAC address even if you later reboot the switch or disable