Port Security Commands - D-Link xStack DES-3528 Series Cli Reference Manual

xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch CLI Reference Guide

Port Security Commands

The Switch's port security commands in the Command Line Interface (CLI) are listed (along with the appropriate
parameters) in the following table.
Command
config port_security ports
delete port_security_entry
clear port_security_entry
show port_security
enable port_security trap_log
disable port_security trap_log
config port_security system
max_learning_addr
config port_security vlan
Each command is listed, in detail, in the following sections.
config port_security ports
Purpose
Syntax
Description
Parameters
Restrictions
Example usage:
To configure the port security:
DES-3528:admin# config port_security ports 1-5 admin_state enable max_learning_addr 5
lock_address_mode deleteonreset
Parameters
[<portlist> | all] [{admin_state [enable | disable] | max_learning_addr
<max_lock_no 0-16384> | lock_address_mode [permanent | deleteontimeout |
deleteonreset]} |{vlan [<vlan_name 32> | vlanid <vidlist>] max_learning_addr
[<max_lock_no 0-16384> | no_limit]}]
[vlan <vlan_name 32> | vlanid <vlanid 1-4094>] mac_address <macaddr>
{ports [<portlist> | all] {[vlan <vlan_name 32> | vlanid <vidlist>]}}
{ports [<portlist> | all] {[vlan <vlan_name 32> | vlanid <vidlist>]}}
[<max_lock_no 1-16384> | no_limit]
[<vlan_name 32> | vlanid <vidlist>] max_learning_addr [<max_lock_no 0-16384>
| no_limit]
Used to configure port security settings.
config port_security ports [<portlist> | all] [{admin_state [enable | disable] |
max_learning_addr <max_lock_no 0-16384> | lock_address_mode [permanent |
deleteontimeout | deleteonreset]} |{vlan [<vlan_name 32> | vlanid <vidlist>]
max_learning_addr [<max_lock_no 0-16384> | no_limit]}]
This command allows for the configuration of the port security feature. Only the ports listed
in the <portlist> are affected.
portlist − Specifies a port or range of ports to be configured.
all − Configure port security for all ports on the Switch.
admin_state [enable | disable] – Enable or disable port security for the listed ports.
max_learning_addr <max_lock_no 0-16384> − Use this to limit the number of MAC
addresses dynamically listed in the FDB for the ports.
lock_address_mode [permanent | deleteontimout | deleteonreset] – Indicates the method of
locking addresses. The user has three choices:

permanent – The locked addresses will not age out after the aging timer expires.

deleteontimeout – The locked addresses will age out after the aging timer expires.

deleteonreset – The locked addresses will not age out until the Switch has been
reset.
vlan – Specifies the VLAN name used.
vlanid – Specifies the VLAN ID used.
max_learning_addr – Specifies the maximum learning address value. To specify this value to
have no limit, select the 'no_limit' option.
Only Administrator and Operator-level users can issue this command.
35