Sample Learned Port Security Configuration - Alcatel OmniSwitch 6600 Family Network Configuration Manual

Configuring Learned Port Security

Sample Learned Port Security Configuration

This section provides a quick tutorial that demonstrates the following tasks:
Enabling LPS on a set of switch ports.
•
Defining the maximum number of learned MAC addresses allowed on an LPS port.
•
Defining the time limit in which source learning is allowed on all LPS ports.
•
Selecting a method for handling unauthorized traffic received on an LPS port.
•
Note that LPS is supported on 10/100 and gigabit Ethernet fixed, mobile, tagged and authenticated ports.
Link aggregate and tagged (trunked) link aggregate ports are not eligible for LPS monitoring and control.
1 Enable LPS on ports 6 through 12 on slot 3, 4, and 5 using the following command:
-> port-security 3/6-12 4/6-12 5/6-12 enable
2
Set the total number of learned MAC addresses allowed on the same ports to 25 using the following
command:
-> port-security 3/6-12 4/6-12 5/6-12 maximum 25
3 Configure the amount of time in which source learning is allowed on all LPS ports to 30 minutes using
the following command:
-> port-security shutdown 30
4
Select shutdown for the LPS violation mode using the following command:
-> port-security 3/6-12 4/6-12 5/6-12 violation shutdown
Note. Optional. To verify LPS port configurations, use the
-> show port-security
Port Security
-------+-----------+---------+-----------+------------------+-----------
1/12 enabled
1/23 enabled
1/24 enabled
-> show port-security config-mac-range
Port
---------+-------------------+-----------------
1/12 00:00:00:00:00:00
1/23 00:00:00:00:00:00
1/24 00:95:2a:00:00:5a
To verify the source learning time limit value, use the
example:
-> show port-security shutdown
LPS Shutdown = 60 mins
OmniSwitch 6600 Family Network Configuration Guide
MaxMacs Violation
100 restrict
2 restrict
100 shutdown
LowMac HighMac
ff:ff:ff:ff:ff:ff
ff:ff:ff:ff:ff:ff
00:95:2a:00:00:6f
Sample Learned Port Security Configuration
show port-security
IndividualMac
00:01:96:1c:f1:c0
00:06:5b:a3:19:3f
00:95:2a:0f:ce:19
00:95:2a:5e:cf:2a
show port-security shutdown
April 2006
command. For example:
MacType
dynamic
dynamic
configured
configured
command. For
page 3-3