Copying The Port Security Database; Deleting The Port Security Database; Clearing The Port Security Database - Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual

Configuring Port Security

Copying the Port Security Database

Tip We recommend that you copy the active database to the config database after disabling auto-learning.
This action will ensure that the configuration database is in synchronization with the active database. If
distribution is enabled, this command creates a temporary copy (and consequently a fabric lock) of the
configuration database. If you lock the fabric, you need to commit the changes to the configuration
databases in all the switches.
Use the port-security database copy vsan command to copy from the active to the configured database. If
the active database is empty, this command is not accepted.
switch# port-security database copy vsan 1
Use the port-security database diff active vsan command to view the differences between the active database
and the configuration database. This command can be used when resolving conflicts.
switch# port-security database diff active vsan 1
Use theport-security database diff config vsan command to obtain information on the differences between
the configuration database and the active database.
switch# port-security database diff config vsan 1

Deleting the Port Security Database

Tip If the distribution is enabled, the deletion creates a copy of the database. An explicit port-security commit
command is required to actually delete the database.
Use the no port-security database vsan command in configuration mode to delete the configured database
for a specified VSAN.
switch(config)# no port-security database vsan 1

Clearing the Port Security Database

Use the clear port-security statistics vsan command to clear all existing statistics from the port security
database for a specified VSAN.
switch# clear port-security statistics vsan 1
Use the clear port-security database auto-learn interface command to clear any learned entries in the active
database for a specified interface within a VSAN.
switch# clear port-security database auto-learn interface fc2/1 vsan 1
Use the clear port-security database auto-learn vsan command to clear any learned entries in the active
database for the entire VSAN.
switch# clear port-security database auto-learn vsan 1
The clear port-security database auto-learn and clear port-security statistics commands are only
Note
relevant to the local switch and do not acquire locks. Also, learned entries are only local to the switch and
do not participate in distribution.
OL-16597-01
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
Copying the Port Security Database
651