Port Security; Table 18: Port Security - Allied Telesis IS230-10GP Reference Manual

Chapter 3: Security
Function
storm-control
(broad-
cast|unknown-uni-
cast|unknown-
multicast) level
<1-1000000>
no storm-control
(broad-
cast|unknown-uni-
cast|unknown-
multicast) level
storm-control
action (drop|shut-
down)
no storm-control
action

Port Security

Function
show port-security User EXEC
[no] port-secu-
rity [learning-
limit <0-64>]
[no] mac-viola-
tion-notify
48
Table 17. Storm Control (Continued)
Privilege Description
Admin EXEC Set control rate of storm-
control type.
Admin EXEC No control rate of storm-
control type.
Admin EXEC The storm control mecha-
nism drops packets which
exceed storm control rate or
just shuts down the port.
Admin EXEC Set action to drop.
This feature lets you control access to all or specific ports on the switch
based on the source MAC addresses of the network devices. You specify
the maximum number of source MAC addresses that ports can learn.
Ports that learn their maximum number of addresses discard packets that
have new, unknown addresses, preventing access to the switch by any
further devices.
Table 18. Port Security
Privilege Description
Display port-security status. switch# show port-security
Admin EXEC Enable port security of a
port and specify a maxi-
mum FDB learning number
of that port.
Disable port security.
Admin EXEC When a port reaches its
maximum FDB learning
number, the system will
send to SNMP trap for a
new MAC.
Example
switch(config-if)# storm-con-
trol broadcast level 1000
switch(config-if)# no storm-
control broadcast level
switch(config-if)# storm-con-
trol action shutdown
switch(config-if)# no storm-
control action
Example
switch(config-if)# port-security
learning-limit 5
switch(config-if)# port-security
switch(config-if)# no port-secu-
rity
switch(config-if)# mac-viola-
tion-notify
switch(config-if)# no mac-viola-
tion-notify