Port Security Commands - D-Link xStack DES-3528 Series Cli Reference Manual

xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide
P S
ORT ECURITY
The Switch's port security commands in the Command Line Interface (CLI) are listed (along with the appropriate
parameters) in the following table.
Command
config port_security ports
delete port_security_entry
clear port_security_entry
show port_security
enable port_security trap_log
disable port_security trap_log
config port_security system
max_learning_addr
config port_security vlan
Each command is listed, in detail, in the following sections.
config port_security ports
Purpose
Syntax
Description
Parameters
Restrictions
Example usage:
To configure the port security:
DES-3528:admin# config port_security ports 1-5 admin_state enable max_learning_addr 5
lock_address_mode deleteonreset
C
OMMANDS
Parameters
[<portlist> | all] [{admin_state [enable | disable] | max_learning_addr
<max_lock_no 0-16384> | lock_address_mode [permanent | deleteontimeout |
deleteonreset]} |{vlan [<vlan_name 32> | vlanid <vidlist>] max_learning_addr
[<max_lock_no 0-16384> | no_limit]}]
[vlan <vlan_name 32> | vlanid <vlanid 1-4094>] mac_address <macaddr>
{ports [<portlist> | all] {[vlan <vlan_name 32> | vlanid <vidlist>]}}
{ports [<portlist> | all] {[vlan <vlan_name 32> | vlanid <vidlist>]}}
[<max_lock_no 1-16384> | no_limit]
[<vlan_name 32> | vlanid <vidlist>] max_learning_addr [<max_lock_no 0-16384>
| no_limit]
Used to configure port security settings.
config port_security ports [<portlist> | all] [{admin_state [enable | disable] |
max_learning_addr <max_lock_no 0-16384> | lock_address_mode [permanent |
deleteontimeout | deleteonreset]} |{vlan [<vlan_name 32> | vlanid <vidlist>]
max_learning_addr [<max_lock_no 0-16384> | no_limit]}]
This command allows for the configuration of the port security feature. Only the ports listed
in the <portlist> are affected.
portlist − Specifies a port or range of ports to be configured.
all − Configure port security for all ports on the Switch.
admin_state [enable | disable] – Enable or disable port security for the listed ports.
max_learning_addr <max_lock_no 0-16384> − Use this to limit the number of MAC
addresses dynamically listed in the FDB for the ports.
lock_address_mode [permanent | deleteontimout | deleteonreset] – Indicates the method of
locking addresses. The user has three choices:

permanent – The locked addresses will not age out after the aging timer expires.

deleteontimeout – The locked addresses will age out after the aging timer expires.

deleteonreset – The locked addresses will not age out until the Switch has been
reset.
vlan – Specifies the VLAN name used.
vlanid – Specifies the VLAN ID used.
max_learning_addr – Specifies the maximum learning address value. To specify this value to
have no limit, select the 'no_limit' option.
Only Administrator and Operator-level users can issue this command.
31