D-Link xStack DGS-3610 Series Configuration Manual page 503

DGS-3610 Series Configuration Guide
Command
DGS-3610(config-if)# switchport
port-security maximum value
DGS-3610(config-if)# switchport
port-security violation{protect |
restrict | shutdown}
In the interface configuration mode, you can disable the port security function of an interface
with the command no switchport port-security. Execute the command no switchport
port-security maximum to recover to the default maximum value. Execute the command
no switchport port-security violation to set violation handling to the default mode.
The instance below describes how to enable the port security function on interface
gigabitethernet 0/3. The maximum number of addresses is set to 8 and the violation
handling mode is set to protect.
DGS-3610# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
DGS-3610(config)# interface gigabitethernet 0/3
DGS-3610(config-if)# switchport mode access
DGS-3610(config-if)# switchport port-security
DGS-3610(config-if)# switchport port-security maximum 8
DGS-3610(config-if)# switchport port-security violation protect
DGS-3610(config-if)# end
Note
36.3.2.4 Configuration of Security addresses on the
Security Port
In the interface configuration mode, add security addresses for secure ports with the
following commands:
Function
Set the maximum number of security addresses on the
interface. The range is between 1 and 1000 and the default
value is 128.
Set the violation handling mode:
protect: Protected port. When the number of security
addresses if full, the security port will discard the packets
from unknown address (that is, not any among the security
addresses of the port).
restrict: When violation occurs, the system sends a Trap
notice.
shutdown: When violation occurs, the system disables the
port and sends a Trap notice. When a port is closed
because of violation, you can recover it from the error
status through the errdisable recovery command in the
global configuration mode.
If the security address MAC+IP has been configured on the secure port,
the exception handling rule for the port will not take effect.
Chapter 36 Port-Based Flow Control Configuration
36-7