D-Link DXS-1210-12TC Reference Manual page 251

•
•
Example
This example shows how to configure the port security mode to be permanent, specifying that a
maximum of 5 secure MAC addresses are allowed on the port.
Switch# configure terminal
Switch(config)#interface eth 1/0/1
Switch(config-if)# switchport port-security mode permanent
Switch(config-if)# switchport port-security maximum 5
Switch(config-if)#
This example shows how to manually add the secure MAC addresses 00-00-12-34-56-78 with VID 5
at interface eth1/0/1.
Switch# configure terminal
Switch(config)#interface eth 1/0/1
Switch(config-if)# switchport port-security mac-address 00-00-12-34-56-78 vlan 5
Switch(config-if)#
This example shows how to configure the Switch to drop all packets from the insecure hosts at the
port-security process level and increment the securityviolation counter if a security violation is
detected.
Switch# configure terminal
Switch(config)#interface eth 1/0/1
Switch(config-if)# switchport port-security violation restrict
Switch(config-if)#
31-5
This command is used to configure the aging time for auto-learned dynamic secure addresses on an
interface. Use the no form of this command to revert to the default settings.
switchport port-security aging {time MINUTES | type {absolute | inactivity}}
no switchport port-security aging {time | type}
Parameters
MINUTES
type
absolute
inactivity
Default
By default, the port security aging feature is disabled.
The default time is 0 minutes.
DXS-1210 Series Smart Managed Switch CLI Reference Guide
Restrict - A port security violation restricts data and causes the security violation counter to
increment.
Shutdown - The interface is disabled, based on errors, when a security violation occurs.
switchport port-security aging
Specifies the aging time for the auto-learned dynamic secured address
on this port. Its range is from 1 to 1440 in minutes.
Specifies to set the aging type.
Specifies to set absolute aging type. All the secure addresses on this
port age out exactly after the time specified and is removed from the
secure address list. This is the default type.
Specifies to set the inactivity aging type. The secure addresses on this
port age out only if there is no data traffic from the secure source
address for the specified time period.
248