Alcatel-Lucent OmniSwitch 6250, Cli Reference Manual, Page: 663 / 2018

Learned Port Security Commands
OmniSwitch 6250 CLI Reference Guide November 2009 page 19-15
port-security violation
Selects the method for handling traffic that does not comply with LPS restrictions for the specified port(s).
port-security slot/port[-port2] violation {restrict | shutdown}
Syntax Definitions
slot/port The slot number for the module and the physical port number on that
module (e.g., 3/1 specifies port 1 on slot 3).
-port2 The last port number in a range of ports you want to configure on the
same slot (e.g, 3/1-4 specifies ports 1-4 on slot 3).
restrict Filters (blocks) unauthorized traffic but allows traffic that complies with
LPS restrictions to forward on the port.
shutdown The port is disabled when the port receives unauthorized traffic; no traf-
fic is allowed on the port.
Defaults
By default, the security violation mode is set to restrict when LPS is enabled on the port.
Platforms Supported
OmniSwitch 6250
Usage Guidelines
•
When a traffic violation occurs on an LPS port, notice is sent to the Switch Logging task.
•
If the violation mode is set to restrict , unauthorized source MAC addresses are not learned in the LPS
table but are still recorded in the source learning MAC address table with a filtered operational status.
This allows the user to view MAC addresses that were attempting unauthorized access to the LPS port.
•
When an LPS port is disabled ( shutdown ) or unauthorized traffic received on the port is filtered
( restrict ) due to a security violation, use the port-security release command to restore the port to
normal operation.
Examples
-> port-security 2/14 violation restrict
-> port-security 4/10-15 violation shutdown
Release History
Release 6.6.1; command was introduced.