Port Security - SMC Networks 6824MPE INT Management Manual

C L
OMMAND INE

port security

This command enables or configures port security. Use the no form without
any keywords to disable port security. Use the no form with the appropriate
keyword to restore the default settings for a response to security violation or
for the maximum number of allowed addresses.
Syntax
port security [action {shutdown | trap | trap-and-shutdown}
| max-mac-count address-count]
no port security [action | max-mac-count]
• action - Response to take when port security is violated.
- shutdown - Disable port only.
- trap - Issue SNMP trap message only.
- trap-and-shutdown - Issue SNMP trap message and disable port.
• max-mac-count
address-count - The maximum number of MAC addresses that can be
learned on a port. (Range: 0 - 1024)
Default Setting
• Status: Disabled
• Action: None
• Maximum Addresses: 0
Command Mode
Interface Configuration (Ethernet)
Command Usage
• If you enable port security, the switch will stop dynamically learning new
addresses on the specified port. Only incoming traffic with source
addresses already stored in the dynamic or static address table will be
accepted.
• To use port security, first allow the switch to dynamically learn the
<source MAC address, VLAN> pair for frames received on a port for
an initial training period, and then enable port security to stop address
learning. Be sure you enable the learning function long enough to ensure
that all valid VLAN members have been registered on the selected port.
4-110
I
NTERFACE