Alcatel-Lucent 060321-10, Rev. B, Cli Reference Manual

Page: 1904 / 2354

port-security Learned Port Security Commands
page 30-2 OmniSwitch CLI Reference Guide March 2011
port-security
Enables or disables Learned Port Security (LPS) on the switch port(s). When LPS is enabled, only devices
that have a source MAC address that comply with LPS restrictions are learned on the port(s).
port-security {port slot/port[-port2] | chassis} [learning-enable | learning-disable]
no port-security port slot/port[-port2]
port-security chassis learning-disable
Syntax Definitions
slot/port The slot number for the module and the physical port number on that
module (for example, 3/1 specifies port 1 on slot 3).
-port2 The last port number in a range of ports you want to configure on the
same slot (for example, 3/1-4 specifies ports 1-4 on slot 3).
learning-enable Enables Learned Port Security (LPS) on the specified port(s).
learning-disable Disables LPS on the specified port(s).
chassis learning-disable Disables all LPS-eligible ports on the chassis.
Defaults
By default, LPS is disabled on all switch ports.
Platforms Supported
OmniSwitch 10K
Usage Guidelines
•
Use the no form of this command to remove LPS and clear all entries from the table. This command
enables learning of new MAC addresses.
•
Learned Port Security (LPS) cannot be applied on the whole chassis. The learning-enable option
cannot used along with the chassis option.
•
The port-security chassis learning-disable command disables all the LPS-eligible ports on the
chassis. Disabling port security restricts a port from learning new MAC addresses.
•
LPS is supported on Ethernet fixed, 802.1Q tagged ports, and 802.1x ports.
•
LPS is not supported on Ethernet, link aggregate, or 802.1Q tagged link aggregate (trunked) ports.
•
Note that when LPS is enabled on an active port, all MAC addresses learned on that port before the
time LPS is enabled, are cleared from the source learning MAC address table.
parameter default
learning-enable | learning-disable learning-enable