138
CHAPTER 3
CLI CONFIGURATION
Negation:
(configt-if)# no port-security
Show:
> show port-security switch [ interface ( <port_type> [ <v_port_type_list> ] ) ]
# show port-security switch [ interface ( <port_type> [ <v_port_type_list> ] ) ]
3.9.33.5 (config-if)# port-security maximum
Syntax:
(configt-if)# port-security maximum [ <v_1_to_1024> ]
Explanation:
The maximum number of MAC addresses that can be secured on this port. The number cannot exceed
1024. If the limit is exceeded, the corresponding action is taken.
Parameters:
[ <v_1_to_1024> ]: Specify a value between 1 and 1024.
Example:
Limit Gigabit Ethernet port 1-10’s MAC addresses can be learnt to 5.
Negation:
(configt-if)# no port-security maximum
Show:
> show port-security port [ interface ( <port_type> [ <v_port_type_list> ] ) ]
# show port-security port [ interface ( <port_type> [ <v_port_type_list> ] ) ]
3.9.33.6 (config-if)# port-security violation
Syntax:
(configt-if)# port-security violation { protect | trap | trap-shutdown | shutdown }
Explanation:
If the limit is exceeded, the specified action will take effect.
Parameters:
{ protect | trap | trap-shutdown | shutdown }: Specify one of the actions taken when the limit is exceeded.
protect:
Do not allow more than the specified limit of MAC addresses to access on a port. No action is
further taken.
trap:
If Limit + 1 MAC addresses are seen on the port, send an SNMP trap. If Aging is disabled, only one
SNMP trap will be sent, but with Aging enabled, new SNMP traps will be sent every time the limit is
exceeded.
trap-shutdown:
If Limit + 1 MAC addresses is seen on the port, both the “Trap” and the “Shutdown” actions
described above will be taken.
shutdown:
If Limit + 1 MAC addresses is seen on the port, shut down the port. This implies that all secured
MAC addresses will be removed from the port, and no new addresses will be learned. Even if the link is
# config t
(config)# interface gigabitethernet 1/1-10
(config-if)# port-security maximum 5
# config t
(config)# interface gigabitethernet 1/1-10
(config-if)# port-security
Summary of Contents for IFS-1604GSM Series
Page 385: ......
