Extreme Networks EAS 200-24p Switch, Manual

Page: 611 / 908

config port_security ports
Extreme Networks EAS 200-24p Switch CLI Manual
611
config port_security ports
Description
This command configures the admin state, the maximum number of addresses that can be learnt and
the lock address mode.
There are four levels that limit the number of learned entries; the entire system, a port, a VLAN, and a
specific VLAN on a port. If any limitation is exceeded, the new entry will be discarded.
Format
config port_security ports [<portlist> | all] [{admin_state [enable | disable]
| max_learning_addr <max_lock_no 0-3072> | lock_address_mode [permanent |
deleteontimeout | deleteonreset]} (1)| {vlan [<vlan_name 32> | vlanid
<vidlist>] max_learning_addr [<max_lock_no 0-3072> | no_limit]}(1)]
Parameters
●
ports - Specifies the range of ports to be configured.
●
<portlist> - Enter the list of port used for this configuration here.
●
all - Specifies that all ports will be configured.
●
admin_state - (Optional) Specifies the state of the port security function on the port.
●
enable - Specifies to enable the port security function on the port.
●
disable - Specifies to disable the port security function on the port. By default, the setting is
disabled.
●
max_learning_addr - (Optional) Specifies the maximum number of port security entries that can be
learned on this port. If the value is set to 0, it means that no user can be authorized by the port
security function on this port. If the setting is smaller than the number of current learned entries on
the port, the command will be rejected. The default value is 32.
●
<max_lock_no 0-3072> - Enter the maximum number of port security entries that can be learned
here. This value must be between 0 and 3072.
●
lock_address_mode - (Optional) Indicates the lock address mode. The default mode is deleteonreset.
●
permanent - The address will never be deleted unless the user removes it manually, the VLAN of
the entry is removed, the port is removed from the VLAN, or port security is disabled on the port
where the address resides.
●
deleteontimeout - This entry will be removed if the entry is idle for the specified aging time.
●
deleteonreset - This address will be removed if the switch is reset or rebooted. Events that cause
permanent entries to be deleted also apply to the deleteonreset entries.
●
vlan - (Optional) Specifies the VLAN name used here.
●
<vlan_name 32> - Enter the VLAN name used here. This name can be up to 32 characters long.
●
vlanid - (Optional) Specifies the VLAN ID used here.
●
<vidlist> - Enter the VLAN ID used here.
●
max_learning_addr - (Optional) Specifies the maximum learning address value.
●
<max_lock_no 0-3072> - Enter the maximum learning address value here. This value must be
between 0 and 3072.