Cisco AJ732A - MDS 9134 Fabric Switch Command Reference Manual page 853

Chapter 18 P Commands
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Command History Release
1.2(1)
2.0(x)
Usage Guidelines
When you activate the port security feature, the auto-learn option is also automatically enabled. You
can choose to activate the port-security feature and disable autolearn using the port-security activate
vsan number no-auto-learn command. In this case, you need to manually populate the port security
database by individually securing each port.
If the auto-learn option is enabled on a VSAN, you cannot activate the database for that VSAN without
the force option.
Examples The following example activates the port security database for the specified VSAN, and automatically
enables autolearning.
switch# config terminal
switch(config)# port-security activate vsan 1
The following example deactivates the port security database for the specified VSAN, and automatically
disables auto-learn.
switch# config terminal
switch(config)# no port-security activate vsan 1
The following example disables the auto-learn feature for the port security database in VSAN 1.
switch# config terminal
switch(config)# port-security activate vsan 1 no-auto-learn
The following example enables auto-learning so the switch can learn about any device that is allowed to
access VSAN 1. These devices are logged in the port security active database.
switch# config terminal
switch(config)# port-security auto-learn vsan 1
The following example disables auto-learning and stops the switch from learning about new devices
accessing the switch. Enforces the database contents based on the devices learnt up to this point.
switch# config terminal
switch(config)# no port-security auto-learn vsan 1
The following example enters the port security database mode for the specified VSAN.
switch# config terminal
switch(config)# port-security database vsan 1
switch(config-port-security)#
The following example configures any WWN to login through the specified interfaces.
switch(config-port-security)# any-wwn interface fc1/1 - fc1/8
The following example configures the specified pWWN to only log in through the specified fWWN.
switch(config-port-security)# pwwn 20:11:00:33:11:00:2a:4a fwwn 20:81:00:44:22:00:4a:9e
The following example deletes the specified pWWN configured in the previous step.
OL-18089-01, Cisco MDS NX-OS Release 4.x
Modification
This command was introduced.
Add the optional swwn keyword to the subcommands under the
port-security database vsan command.
Cisco MDS 9000 Family Command Reference
port-security
18-21