Configuring Unicast Flood Blocking On Secure Ports - Cisco WS-C2950SX-48-SI Configuration Manual

Configuring Port Security on the Switch
This example removes all MAC addresses from ports 4/5–7:
Console> (enable) clear port security 4/5-7 all
All addresses cleared from secure address list for ports 4/5-7
Console> (enable)

Configuring Unicast Flood Blocking on Secure Ports

To configure unicast flood blocking, you must disable the unicast flood feature.
The port disables unicast flooding once the MAC address limit is reached.
Note
To configure unicast flood blocking on a secure port, perform this task in privileged mode:
Task
Step 1
Disable unicast flood blocking on the desired
secure ports.
Step 2
Verify the configuration of unicast flood blocking. show port security mod/port
Step 3 Verify the status of unicast flood blocking.
This example shows how to configure the switch to disable unicast flood packets on a port and how to
verify its configuration:
Console> (enable) set port security 4/1 unicast-flood disable
Port 4/1 security flood mode set to disable.
Console> (enable) show port security 4/1
Port
----- -------- --------- ------------- -------- -------- -------- -------
4/1
Port
----- -------- ----------------- -------- ----------------- ------------------
4/1
Port Flooding on Address Limit
---- -------------------------
4/1
Console> (enable) show port unicast-flood 4/1
Port
----
4/1
Console> (enable)
Note The show port unicast-flood command displays the run-time status of unicast flood blocking. The
output can show unicast flooding as either enabled or disabled depending upon if the port has exceeded
its address limitation.
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
16-6
Security Violation Shutdown-Time Age-Time Max-Addr Trap
disabled shutdown
Num-Addr Secure-Src-Addr
0
Disabled
Unicast Flooding
----------------
Disabled
Command
set port security mod/port unicast-flood disable
show port unicast-flood mod/port
0 0
Age-Left Last-Src-Addr
- -
Chapter 16 Configuring Port Security
IfIndex
1 disabled 50
Shutdown/Time-Left
- - -
—
Release 8.1
78-15486-01