Port Security; Mac-Learning; Table 67: Management Ip Filter Commands - Edge-Core ECS4610-24F Management Manual

| General Security Measures
C 28
HAPTER

Port Security

P S
ORT ECURITY

mac-learning

These commands can be used to enable port security on a port.
When MAC address learning is disabled on an interface, only incoming
traffic with source addresses already stored in the dynamic or static
address table for this port will be authorized to access the network.
When using port security, the switch stops learning new MAC addresses on
the specified port when it has reached a configured maximum number.
Only incoming traffic with source addresses already stored in the dynamic
or static address table for this port will be authorized to access the
network. The port will drop any incoming frames with a source MAC
address that is unknown or has been previously learned from another port.
If a device with an unauthorized MAC address attempts to use the switch
port, the intrusion will be detected and the switch can automatically take
action by disabling the port and sending a trap message.

Table 67: Management IP Filter Commands

Command Function
mac-address-table static Maps a static address to a port in a VLAN
mac-learning Enables MAC address learning on the selected
physical interface or VLAN
port security Configures a secure port
show mac-address-table Displays entries in the bridge-forwarding database
This command enables MAC address learning on the selected interface. Use
the no form to disable MAC address learning.
S
YNTAX
[no] mac-learning
D S
EFAULT ETTING
Enabled
C M
OMMAND ODE
Interface Configuration (Ethernet or Port Channel)
C U
OMMAND SAGE
The no mac-learning command immediately stops the switch from
◆
learning new MAC addresses on the specified port or trunk. Only
incoming traffic with source addresses stored in the static address table
will be accepted. Note that the dynamic addresses stored in the
address table when MAC address learning is disabled are flushed from
the system, and no dynamic addresses are subsequently learned until
MAC address learning has been re-enabled.
– 708 –
Mode
GC
IC
IC
PE