Enabling And Configuring Port Security Aging - Cisco ME 3400 Software Configuration Manual

Configuring Port Security

Enabling and Configuring Port Security Aging

You can use port security aging to set the aging time for all secure addresses on a port. Two types of
aging are supported per port:
•
•
Use this feature to remove and add devices on a secure port without manually deleting the existing secure
MAC addresses and to still limit the number of secure addresses on a port. You can enable or disable the
aging of secure addresses on a per-port basis.
Beginning in privileged EXEC mode, follow these steps to configure port security aging:
Command
Step 1 configure terminal
Step 2 interface interface-id
Step 3 no shutdown
Step 4 switchport port-security aging {static | time time |
type {absolute | inactivity}}
Step 5 end
Step 6
show port-security [interface interface-id]
[address]
Step 7
copy running-config startup-config
To disable port security aging for all secure addresses on a port, use the no switchport port-security
aging time interface configuration command. To disable aging for only statically configured secure
addresses, use the no switchport port-security aging static interface configuration command.
Cisco ME 3400 Ethernet Access Switch Software Configuration Guide
22-16
Absolute—The secure addresses on the port are deleted after the specified aging time.
Inactivity—The secure addresses on the port are deleted only if the secure addresses are inactive for
the specified aging time.
Chapter 22
Purpose
Enter global configuration mode.
Specify the interface to be configured, and enter interface
configuration mode.
Enable the port, if necessary. By default, UNIs and ENIs are
disabled, and NNIs are enabled.
Enable or disable static aging for the secure port, or set the
aging time or type.
The switch does not support port security aging of
Note
sticky secure addresses.
Enter static to enable aging for statically configured secure
addresses on this port.
For time, specify the aging time for this port. The valid range is
from 0 to 1440 minutes.
For type, select one of these keywords:
absolute—Sets the aging type as absolute aging. All the
•
secure addresses on this port age out exactly after the time
(minutes) specified lapses and are removed from the secure
address list.
inactivity—Sets the aging type as inactivity aging. The
•
secure addresses on this port age out only if there is no data
traffic from the secure source addresses for the specified
time period.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Configuring Port-Based Traffic Control
OL-9639-07