Table of Contents
Advertisement
Configuring and Monitoring Port Security
Port Security
N o t e
Learn Mode
Static
Continuous
Port-access
Limited-continuous
Configured
14-4
Feature Interactions When Eavesdrop Prevention is Disabled
The following table explains the various interactions between learning modes
and Eavesdrop Prevention when Eavesdrop Prevention is disabled.
When the learning mode is "port-access", Eavesdrop Prevention will not be
applied to the port. However, it can still be configured or disabled for the port.
Effect
When Eavesdrop Prevention is disabled, the port transmits packets that have
unknown destination addresses. The port is secured and only a limited number
of static MAC addresses are learned. A device must generate traffic before the
MAC address is learned and traffic is forwarded to it.
The default. The Eavesdrop Prevention option does not apply because port
security is disabled. Ports forward traffic with unknown destination addresses
normally.
Disabling Eavesdrop Prevention is not applied to the port. There is no change.
When Eavesdrop Prevention is disabled, the port transmits packets that have
unknown destination addresses. The port is secured; MAC addresses age
normally. Eavesdrop Prevention may cause difficulties in learning MAC
addresses (as with static MAC addresses) and cause serious traffic issues
when a MAC ages out.
When Eavesdrop Prevention is disabled, the port transmits packets that have
unknown destination addresses. The port is secured by a static MAC address.
Eavesdrop Prevention should not cause any issues because all valid MAC
addresses have been configured.
.
Syntax
[no] port-security <port-list> eavesdrop-prevention
When this option is enabled, the port is prevented from
transmitting packets that have unknown destination
addresses. Only devices attached to the port receive packets
intended for them. This option does not apply to a learning
mode of port-access or continuous.
Default: Enabled
Hide quick links:
Advertisement
Table of Contents
