Configuring the Number of MAC Addresses Allowed
Configuring Learned Port Security
page 3-8
OmniSwitch 6624/6648 Network Configuration Guide
April 2004
Configuring the Number of MAC Addresses
Allowed
By default, one MAC address is allowed on an LPS port. To change this number, enter
port-security
followed by the port’s
slot/port
designation then
maximum
followed by a number between 1 and 100. For
example, the following command sets the maximum number of MAC addresses learned on port 10 of slot
6 to 75:
-> port-security 6/10 maximum 75
To specify a maximum number of MAC addresses allowed for multiple ports, specify a range of ports or
multiple slots. For example:
-> port-security 1/10-15 maximum 10
-> port-security 2/1-5 4/2-8 5/10-14 maximum 25
Not that configured MAC addresses count towards the maximum number allowed. For example, if there
are 10 configured authorized MAC addresses for an LPS port and the maximum number of addresses
allowed is set to 15, then only 5 dynamically learned MAC address are allowed on this port.
If the maximum number of MAC addresses allowed is reached before the switch LPS time limit expires,
then all source learning of dynamic
and
configured MAC addresses is stopped on the LPS port.
Configuring Authorized MAC Addresses
To configure a single source MAC address entry in the LPS table, enter
port-security
followed by the
port’s
slot/port
designation, then
mac
followed by a valid MAC address. For example, the following
command configures a MAC address for port 4 on slot 6:
-> port-security 6/4 mac 00:20:da:9f:58:0c
To configure a single source MAC address entry for multiple ports, specify a range of ports or multiple
slots. For example:
-> port-security 4/1-5 mac 00:20:95:41:2e:3f
-> port-security 5/12-20 6/10-15 mac 00:20:da:cf:59:4a
Use the
no
form of this command to clear configured
and/or
dynamic MAC address entries from the LPS
table. For example, the following command removes a MAC address entry for port 12 of slot 4 from the
LPS table:
-> port-security 4/12 no mac 00:20:95:00:fa:5c
Note that when a MAC address is cleared from the LPS table, it is automatically cleared from the source
learning MAC address table at the same time.