Commands; Purpose; Show Maclock; Configuring Mac Locking - Enterasys Matrix DFE-Gold Series Configuration Manual

Configuring MAC Locking

• Flow Setup Throttling (FST) — prevents the effects of DoS attacks by limiting the number of
new or established flows that can be programmed on any individual switch port. For details,
refer to "Configuring Flow Setup Throttling (FST)" on page 24‐25.
Configuring MAC Locking

Purpose

To review, disable, enable and configure MAC locking. This locks a MAC address to one or more
ports, preventing connection of unauthorized devices via the port(s). When source MAC
addresses are received on specified ports, the switch discards all subsequent frames not
containing the configured source addresses. The only frames forwarded on a "locked" port are
those with the "locked" MAC address(es) for that port.

Commands

For information about...

show maclock

show maclock stations
set maclock enable
set maclock disable
set maclock
set maclock firstarrival
set maclock move
clear maclock firstarrival
set maclock static
clear maclock static
set maclock trap
clear maclock
show maclock
Use this command to display the status of MAC locking on one or more ports.
Syntax
show maclock [port_string]
24-2 Security Configuration
Note: Matrix DFE-Gold Series modules allow for up to 32 MAC addresses to be locked per port.
show maclock
Refer to page...
24-2
24-4
24-5
24-5
24-6
24-7
24-7
24-8
24-8
24-9
24-9
24-10