Set Maclock Firstarrival; Clear Maclock Firstarrival - Enterasys SecureStack C2 Configuration Manual

Defaults
None.
Mode
Switch command, read‐write.
Example
This example shows how to reset the number of allowable static MACs on
C2(rw)->clear maclock static ge.2.3

set maclock firstarrival

Use this command to restrict MAC locking on a port to a maximum number of end station
addresses first connected to that port.
Syntax
set maclock firstarrival port-string value
Parameters
port‐string
value
Defaults
None.
Mode
Switch command, read‐write.
Usage
The maclock first arrival count resets when the link goes down. This feature is beneficial if you
have roaming users—the first arrival count will be reset every time a user moves to another port,
but will still protect against connecting multiple devices on a single port and will protect against
MAC address spoofing.
If you wish to have only statically set MACs, set a port's first arrival limit to 0.
Example
This example shows how to restrict MAC locking to 6 MAC addresses on
C2(su)->set maclock firstarrival ge.2.3 6

clear maclock firstarrival

Use this command to reset the number of first arrival MAC addresses allowed per port to the
default value of 600.
Specifies the port on which to limit MAC locking. For a detailed
description of possible port‐string values, refer to "Port String Syntax Used
in the CLI" on page 5‐2.
Specifies the number of first arrival end station MAC addresses to be
allowed connections to the port. Valid values are 0 to 600.
set maclock firstarrival
.2.3:
ge
.2.3:
ge
SecureStack C2 Configuration Guide 18-53