OmniSwitch os6900, Network Configuration Manual, Page: 812 / 942

Configuring Learned Port Security Configuring Learned Port Security
page 31-12 OmniSwitch AOS Release 7 Network Configuration Guide June 2013
Configuring the LPS Learning Window
By default, the source learning window time limit is disabled. Use the port-security learning-window
command to set the number of minutes that the source learning window should remain open for LPS ports.
During the time the learning window is open, source MAC addresses that comply with LPS port restric-
tions are authorized for source learning on the related LPS port. The following actions trigger the start of
the learning window timer:
•
Using the port-security learning-window command. Each time this command is issued, the timer
restarts even if a current window is still open.
•
A switch reboot with the port-security learning-window command entry saved in the boot.cfg file.
When this command is used to configure the learning window time and related options for the switch,
use the
write memory command to ensure the command is saved in the boot.cfg file.
The LPS learning window time limit is a switch-wide parameter that applies to all LPS-enabled ports, not
just one or a group of LPS ports. The following command example sets the time limit value to 30 minutes:
-> port-security learning-window 30
Note . Once the time limit value expires, source learning of any new dynamic bridged MAC addresses is
stopped on all LPS ports, even if the number of bridged addresses learned does not exceed the maximum
allowed. However, after the window has closed, the switch will continue to learn dynamic filtered MAC
addresses until the maximum number of filtered addresses allowed is reached.
Configuring Learning Window Parameters
In addition to specifying the duration of the LPS learning window, the port-security learning-window
command provides the following parameters for configuring additional learning window options:
Configuring the MAC Address Aging Status
During the learning window time period, dynamically learned MAC addresses may age out before the
learning window time is up. To prevent this from happening, use the
no-aging enable parameter option
with the port-security learning-window command.
When this option is enabled, all dynamic bridged MAC addresses are learned as pseudo-static MAC
addresses. This type of address is treated as a regular statically configured address and will not age out,
even after the learning window closes. However, pseudo-static MAC addresses are not saved in the switch
configuration.
convert-to-static Specifies whether or not learned dynamic bridged MAC addresses
are converted to static MAC addresses when the learning window
closes. See
“Configuring the MAC Address Aging Status” on
page 31-12 .
no-aging Specifies whether or not learned dynamic MAC addresses can age
out. See
“Configuring the MAC Address Aging Status” on
page 31-12 .
boot-up Specifies whether or not the learning window timer will automati-
cally start each time the switch restarts. See
“Starting the Learning
Window at Boot Up” on page 31-13 .