Table of Contents
Advertisement
When a short aging time (less than 60 seconds) works with inactivity aging, do not assign a large
value to the maximum number of secure MAC addresses on a port. A large value in this case might
affect device performance.
Examples
# Set the secure MAC aging timer to 30 minutes.
<Sysname> system-view
[Sysname] port-security timer autolearn aging 30
# Set the secure MAC aging timer to 50 seconds.
<Sysname> system-view
[Sysname] port-security timer autolearn aging second 50
Related commands
display port-security
port-security mac-address security
port-security timer disableport
Use port-security timer disableport to set the silence period during which the port remains
disabled.
Use undo port-security timer disableport to restore the default.
Syntax
port-security timer disableport time-value
undo port-security timer disableport
Default
The port silence period is 20 seconds.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
time-value: Specifies the silence period in seconds during which the port remains disabled. The
value is in the range of 20 to 300.
Usage guidelines
If you configure the intrusion protection action as disabling the port temporarily, use this command to
set the silence period.
Examples
# Configure the intrusion protection action on Ten-GigabitEthernet 1/0/1 as disabling the port
temporarily, and set the port silence period to 30 seconds.
<Sysname> system-view
[Sysname] port-security timer disableport 30
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] port-security intrusion-mode disableport-temporarily
333
Advertisement
Table of Contents
