GE Multilink ML3000 Instruction Manual page 113

CHAPTER 6: ACCESS CONSIDERATIONS
MULTILINK ML3000 ETHERNET COMMUNICATIONS SWITCH – INSTRUCTION MANUAL
To deny a mac address, use the following:
#port-security
(port-security)##ps enable
(port-security)##deny mac=<address,list,range> port=<num,list,range>
(port-security)##action port=<num,list,range>drop
Example 6-1 views port security settings on a switch. Learning is enabled on port 9. This
port has 6 stations connected to it with the MAC addresses as shown. Other ports have
learning disabled and the MAC addresses are not configured on those ports.
Example 6-1: Viewing the port security settings
ML3000#
show port-security
PORT STATE SIGNAL ACTION LEARN COUNT MAC ADDRESS
---- ----- ------ ------ ----- ----- -----------
9 ENABLE LOG NONE ENABLE 6 00:e0:29:2a:f1:bd
10 ENABLE NONE NONE DISABLE 0 Not Configured
11 ENABLE NONE NONE DISABLE 0 Not Configured
12 ENABLE NONE NONE DISABLE 0 Not Configured
13 ENABLE NONE NONE DISABLE 0 Not Configured
14 ENABLE NONE NONE DISABLE 0 Not Configured
15 ENABLE NONE NONE DISABLE 0 Not Configured
16 ENABLE NONE NONE DISABLE 0 Not Configured
ML3000(port-security)##
Example 6-2: Enabling learning on a port
ML3000(port-security)##
Port Learning Enabled on selected port(s)
ML3000(port-security)##
PORT STATE SIGNAL ACTION LEARN COUNT MAC ADDRESS
---- ----- ------ ------ ----- ----- -----------
9 ENABLE LOG NONE ENABLE 6 00:e0:29:2a:f1:bd
10 ENABLE NONE NONE DISABLE 0 Not Configured
11 ENABLE NONE NONE ENABLE 0 Not Configured
12 ENABLE NONE NONE DISABLE 0 Not Configured
13 ENABLE NONE NONE DISABLE 0 Not Configured
14 ENABLE NONE NONE DISABLE 0 Not Configured
00:01:03:e2:27:89
00:07:50:ef:31:40
00:e0:29:22:15:85
00:03:47:ca:ac:45
00:30:48:70:71:23
learn port=11 enable
show port-security
00:01:03:e2:27:89
00:07:50:ef:31:40
00:e0:29:22:15:85
00:03:47:ca:ac:45
00:30:48:70:71:23
ACCESS CONSIDERATIONS
6–5