D-Link DGS-3000 series, Reference Manual

Page: 654 / 909

DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide
650
DGS-3000-26TC:admin#config port_security system max_learning_addr 256
Command: config port_security system max_learning_addr 256
Success.
DGS-3000-26TC:admin#
config port_security ports 64-2
Description
This command is used to configure the admin state, the maximum number of addresses that can
be learnt and the lock address mode.
There are four levels that limit the number of learned entries; the entire system, a port, a VLAN,
and a specific VLAN on a port. If any limitation is exceeded, the new entry will be discarded.
Format
config port_security ports [<portlist> | all] [{admin_state [enable | disable] |
max_learning_addr < max_lock_no 0-3328> | lock_address_mode [permanent |
deleteontimeout | deleteonreset]} (1)| {vlan [<vlan_name 32> | vlanid <vidlist>]
max_learning_addr [<max_lock_no 0-3328> | no_limit]}(1)]
Parameters
<portlist> - Enter the list of port used for this configuration here.
all - Specify that all ports will be configured.
admin_state - (Optional) Specify the state of the port security function on the port.
enable - Specify to enable the port security function on the port.
disable - Specify to disable the port security function on the port. By default, the setting is
disabled.
max_learning_addr - (Optional) Specify the maximum number of port security entries that can
be learned on this port. If the value is set to 0, it means that no user can be authorized by the
port security function on this port. If the setting is smaller than the number of current learned
entries on the port, the command will be rejected. The default value is 32.
<max_lock_no 0-3328> - Enter the maximum number of port security entries that can be
learned here. This value must be between 0 and 3328.
lock_address_mode - (Optional) Indicates the lock address mode. The default mode is
deleteonreset.
permanent - The address will never be deleted unless the user removes it manually, the
VLAN of the entry is removed, the port is removed from the VLAN, or port security is
disabled on the port where the address resides.
deleteontimeout - This entry will be removed if the entry is idle for the specified aging time.
deleteonreset - This address will be removed if the Switch is reset or rebooted. Events that
cause permanent entries to be deleted also apply to the deleteonreset entries.
vlan - (Optional) Specify the VLAN name used here.
<vlan_name 32> - Enter the VLAN name used here. This name can be up to 32 characters
long.
vlanid - (Optional) Specify the VLAN ID used here.
<vidlist> - Enter the VLAN ID used here.
max_learning_addr - (Optional) Specify the maximum learning address value.
<max_lock_no 0-3328> - Enter the maximum learning address value here. This value must
be between 0 and 3328.
no_limit - Specify that the maximum learning address value will be set to no limit.