Cisco N5010P-N2K-BE, Software Configuration Manual

Page: 623 / 704

S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m
45-7
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
OL-16597-01
Chapter 45 Configuring Port Security
Auto-Learning
Database Reactivation
Tip If auto-learning is enabled, you cannot activate the database without the force option until you disable
auto-learning.
To reactivate the port security database, perform this task:
Step 1 Disable auto-learning.
Step 2
Copy the active database to the configured database.
Tip If the active database is empty, you cannot perform this step.
Step 3 Make the required changes to the configuration database.
Step 4
Activate the database.
To reactivate the port security database, perform this task:
Auto-Learning
This section includes the following topics:
•
About Enabling Auto-Learning, page 45-8
•
Enabling Auto-Learning, page 45-8
•
Disabling Auto-Learning, page 45-8
•
Auto-Learning Device Authorization, page 45-8
•
Authorization Scenario, page 45-9
Command Purpose
Step 1
switch# configuration terminal
switch(config)#
Enters configuration mode.
Step 2
switch(config)# no port-security
auto-learn vsan vsan-id
Disables auto-learning and stops the switch from
learning about new devices accessing the switch.
Enforces the database contents based on the devices
learned up to this point.
Step 3
switch(config)# exit
switch# port-security database copy vsan
vsan-id
Copies from the active to the configured database.
Step 4
switch# configuration terminal
switch(config)# port-security activate
vsan
vsan-id
Activates the port security database for the specified
VSAN, and automatically enables auto-learning.