Sample Learned Port Security Configuration - Alcatel-Lucent OmniSwitch 6850-48 Network Configuration Manual

Configuring Learned Port Security

Sample Learned Port Security Configuration

This section provides a quick tutorial that demonstrates the following tasks:
•
Enabling LPS on a set of switch ports.
•
Defining the maximum number of learned MAC addresses allowed on an LPS port.
•
Defining the time limit in which source learning is allowed on all LPS ports.
•
Selecting a method for handling unauthorized traffic received on an LPS port.
Note that LPS is supported on Ethernet and gigabit Ethernet fixed, mobile, tagged and authenticated ports.
Link aggregate and tagged (trunked) link aggregate ports are not eligible for LPS monitoring and control.
1
Enable LPS on ports 6 through 12 on slot 3, 4, and 5 using the following command:
-> port-security 3/6-12 4/6-12 5/6-12 enable
2
Set the total number of learned MAC addresses allowed on the same ports to 25 using the following
command:
-> port-security 3/6-12 4/6-12 5/6-12 maximum 25
3
Configure the amount of time in which source learning is allowed on all LPS ports to 30 minutes using
the following command:
-> port-security shutdown 30
4
Select shutdown for the LPS violation mode using the following command:
-> port-security 3/6-12 4/6-12 5/6-12 violation shutdown
Note. Optional. To verify LPS port configurations, use the
For example:
-> show port-security
Port: 1/30
Operation Mode
Max Bridged MAC allowed :
Max Filtered MAC allowed :
Low End of MAC Range
High End of MAC Range
Violation Setting
MAC
-------------------+------+-------------------
00:20:95:00:fa:5c
To verify the new source learning time limit value, use the
example:
-> show port-security shutdown
LPS Shutdown Config
Convert-to-static
Remaining Learning Window
OmniSwitch AOS Release 6 Network Configuration Guide
: DISABLED,
1,
5,
: 00:00:00:00:00:00,
: ff:ff:ff:ff:ff:ff,
: RESTRICT,
VLAN MAC TYPE
1 STATIC
= 2 min
= DISABLE
= 110 sec
September 2009
Sample Learned Port Security Configuration
port-security learn-trap-threshold
show port-security shutdown
command.
command. For
page 3-3