GE MultiLink ML1200 Instruction Manual page 112

ACCESS CONSIDERATIONS
6–6
Example 6-2 shows how to enable learning on a port. After the learning is enabled, the
port security can be queried to find the status of MAC addresses learnt. If there were
machines connected to this port, the MAC address would be shown on port 3 as they are
shown on port 1.
Example 6-3 shows how to allow specific MAC address on specific ports. After the MAC
address is specified, the port or specific ports or a range of ports can be queried as shown.
Example 6-4 shows how to remove a MAC address from port security
To set logging on a port, use the following command sequence:
ML1200(port-security)##
Port security Signal type set to Log and
Trap on selected port(s)
The examples provided illustrate the necessary commands to setup port security. The
recommended steps to setup security are:
Set the ML1200 software to allow port security commands (use the
port-security
Enable port security (use the
Enable learning on the required ports (for example, use the
port=3
Verify learning is enables and MAC addresses are being learnt on
required ports (use the
Save the port-security configuration (use the
Example 6-3: Allowing specific MAC addresses on specific ports
ML1200(port-security)##
Specified MAC address(es) allowed on selected port(s)
ML1200(port-security)##
PORT STATE SIGNAL
---- ----- ------
1 ENABLE LOG
3 ENABLE NONE
5 ENABLE NONE
Example 6-4: Removing MAC addresses from specific ports
ML1200(port-security)##
Specified MAC address(es) removedfrom selected
port(s)
ML1200(port-security)##
PORT STATE SIGNAL
---- ----- ------
3 ENABLE NONE
ML1200(port-security)##
CHAPTER 6: ACCESS CONSIDERATIONS
signal port=3 logandtrap
command).
enable ps
enable command for port 3).
show port-security port=3
allow mac=00:c1:00:7f:ec:00 port=1,3,5
show port-security port=1,3,5
ACTION LEARN COUNT
------ ----- -----
NONE ENABLE 6
NONE ENABLE 0
NONE DISABLE 0
remove mac=00:c1:00:7f:ec:00 port=3
show port-security port=3
ACTION LEARN COUNT
------ ----- -----
NONE ENABLE 0
MULTILINK ML1200 MANAGED FIELD SWITCH – INSTRUCTION MANUAL
command).
learn
command).
command).
save
MAC ADDRESS
-----------
00:e0:29:2a:f1:bd
00:01:03:e2:27:89
00:07:50:ef:31:40
00:e0:29:22:15:85
00:03:47:ca:ac:45
00:30:48:70:71:23
00:c1:00:7f:ec:00
00:c1:00:7f:ec:00
00:c1:00:7f:ec:00
MAC ADDRESS
-----------
Not Configured