Copying the Port Security Database
We recommend that you copy the active database to the config database after disabling auto-learning.
This action ensures that the configuration database is in synchronization with the active database. If
distribution is enabled, this command creates a temporary copy (and a fabric lock) of the configuration
database. If you lock the fabric, you must commit the changes to the configuration databases in all the
switches.
Tip
Use the
port-security database copy vsan
command to copy from the active to the configured database. If
the active database is empty, this command is not accepted.
switch#
port-security database copy vsan 1
Use the
port-security database diff active vsan
command to view the differences between the active database
and the configuration database. This command can be used when resolving conflicts.
switch#
port-security database diff active vsan 1
Use the
port-security database diff config vsan
command to obtain information on the differences between
the configuration database and the active database:
switch#
port-security database diff config vsan 1
Deleting the Port Security Database
If the distribution is enabled, the deletion creates a copy of the database. You must enter the
port-security
commit
command to actually delete the database.
Tip
Use the
no port-security database vsan
command in configuration mode to delete the configured database
for a specified VSAN:
switch(config)#
no port-security database vsan 1
Clearing the Port Security Database
Use the
clear port-security statistics vsan
command to clear all existing statistics from the port security
database for a specified VSAN.
switch#
clear port-security statistics vsan 1
Use the
clear port-security database auto-learn interface
command to clear any learned entries in the active
database for a specified interface within a VSAN:
switch#
clear port-security database auto-learn interface fc2/1 vsan 1
Use the
clear port-security database auto-learn vsan
command to clear any learned entries in the active
database for the entire VSAN:
switch#
clear port-security database auto-learn vsan 1
The
clear port-security database auto-learn
and
clear port-security statistics
commands are only
relevant to the local switch and do not acquire locks. Also, learned entries are only local to the switch and
do not participate in distribution.
Note
Cisco Nexus 5500 Series NX-OS SAN Switching Configuration Guide, Release 7.x
264
OL-30895-01
Configuring Port Security
Database Interaction
