Copying The Port Security Database; Deleting The Port Security Database; Clearing The Port Security Database - Cisco Nexus 5000 Series Configuration Manual

Configuring Port Security

Copying the Port Security Database

We recommend that you copy the active database to the config database after disabling auto-learning.
Tip
This action ensures that the configuration database is in synchronization with the active database. If
distribution is enabled, this command creates a temporary copy (and a fabric lock) of the configuration
database. If you lock the fabric, you must commit the changes to the configuration databases in all the
switches.
Use the port-security database copy vsan command to copy from the active to the configured database. If
the active database is empty, this command is not accepted.
switch# port-security database copy vsan 1
Use the port-security database diff active vsan command to view the differences between the active database
and the configuration database. This command can be used when resolving conflicts.
switch# port-security database diff active vsan 1
Use the port-security database diff config vsan command to obtain information on the differences between
the configuration database and the active database:
switch# port-security database diff config vsan 1

Deleting the Port Security Database

If the distribution is enabled, the deletion creates a copy of the database. You must enter the port-security
Tip
commit command to actually delete the database.
Use the no port-security database vsan command in configuration mode to delete the configured database
for a specified VSAN:
switch(config)# no port-security database vsan 1

Clearing the Port Security Database

Use the clear port-security statistics vsan command to clear all existing statistics from the port security
database for a specified VSAN.
switch# clear port-security statistics vsan 1
Use the clear port-security database auto-learn interface command to clear any learned entries in the active
database for a specified interface within a VSAN:
switch# clear port-security database auto-learn interface fc2/1 vsan 1
Use the clear port-security database auto-learn vsan command to clear any learned entries in the active
database for the entire VSAN:
switch# clear port-security database auto-learn vsan 1
The clear port-security database auto-learn and clear port-security statistics commands are only
Note
relevant to the local switch and do not acquire locks. Also, learned entries are only local to the switch and
do not participate in distribution.
OL-27583-01
Cisco Nexus 5000 Series NX-OS SAN Switching Configuration Guide, Release 5.2(1)N1(1)
Database Interaction
273