Port Security Activation; Configuring Port Security - Cisco N5010P-N2K-BE Software Configuration Manual

Chapter 45

Configuring Port Security

S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m

Port Security Activation

By default, the port security feature is not activated in Cisco Nexus 5000 Series switches.
When you activate the port security feature, the following operations occur:
•
•
•
After the database is activated, subsequent device login is subject to the activated port bound WWN
pairs, excluding the auto-learned entries. You must disable auto-learning before the auto-learned entries
become activated.
When you activate the port security feature, auto-learning is also automatically enabled. You can choose
to activate the port security feature and disable auto-learning.
If a port is shut down because of a denied login attempt, and you subsequently configure the database to
Tip
allow that login, the port does not come up automatically. You must explicitly enter a no shutdown CLI
command to bring that port back online.
Configuring Port Security
The steps to configure port security depend on which features you are using. Auto-learning works
differently if you are using CFS distribution.
This section includes the following topics:
•
•
•
Configuring Port Security with Auto-Learning and CFS Distribution
To configure port security, using auto-learning and CFS distribution, perform this task:
Step 1 Enable port security.
See the
Enable CFS distribution.
Step 2
See the
Activate port security on each VSAN.
Step 3
This action turns on auto-learning by default. See the
Issue a CFS commit to copy this configuration to all switches in the fabric.
Step 4
OL-16597-01
Auto-learning is also automatically enabled, which means:
From this point, auto-learning happens only for the devices or interfaces that were not logged
–
into the switch.
You cannot activate the database until you disable auto-learning.
–
All the devices that are already logged in are learned and are added to the active database.
All entries in the configured database are copied to the active database.
Configuring Port Security with Auto-Learning and CFS Distribution, page 45-3
Configuring Port Security with Auto-Learning without CFS, page 45-4
Configuring Port Security with Manual Database Configuration, page 45-5
"Enabling Port Security" section on page
"Enabling Distribution" section on page
45-5.
45-12.
"Activating Port Security" section on page
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
Configuring Port Security
45-6.
45-3