1-17
By default, the system disables a port for 20 seconds.
The
port-security timer disableport
command is used in conjunction with the
port-security
intrusion-mode
disableport-temporarily
command to set the length of time during which the port
remains disabled.
Related commands:
port-security intrusion-mode
.
Examples
# Set the intrusion protection mode on Ethernet 1/0/1 to
disableport-temporarily
. It is required that
when intrusion protection is triggered, the port be shut down temporarily and then go up 30 seconds
later.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] port-security timer disableport 30
[Sysname] interface Ethernet 1/0/1
[Sysname-Ethernet1/0/1] port-security intrusion-mode disableport-temporarily
port-security trap
Syntax
port-security trap
{
addresslearned
|
dot1xlogfailure
|
dot1xlogoff
|
dot1xlogon
|
intrusion
|
ralmlogfailure
|
ralmlogoff
|
ralmlogon
}
undo port-security trap
{
addresslearned
|
dot1xlogfailure
|
dot1xlogoff
|
dot1xlogon
|
intrusion
|
ralmlogfailure
|
ralmlogoff
|
ralmlogon
}
View
System view
Parameters
addresslearned
: Enables/disables sending traps for MAC addresses learning events.
dot1xlogfailure
: Enables/disables sending traps for 802.1x authentication failures.
dot1xlogoff
: Enables/disables sending traps for 802.1x-authenticated user logoff events.
dot1xlogon
: Enables/disables sending traps for 802.1x-authenticated user logon events.
intrusion
: Enables/disables sending traps for detections of intrusion packets.
ralmlogfailure
: Enables/disables sending traps for MAC authentication failures.
ralmlogoff
: Enables/disables sending traps for MAC-authenticated user logoff events.
ralmlogon
: Enables/disables sending traps for MAC-authenticated user logon events.
