Raisecom
ISCOM2600G-HI (A) Series Configuration Guide
10 Security
Raisecom Proprietary and Confidential
Copyright © Raisecom Technology Co., Ltd.
410
Raisecom(config-gigaethernet1/1/3)#switchport port-security mac-address
sticky 0000.0000.0002 vlan 1
Raisecom(config-gigaethernet1/1/3)#switchport port-security mac-address
sticky
Raisecom(config-gigaethernet1/1/3)#switchport port-security violation
shutdown
Checking results
Use the
show port-security
command to show configurations of port security MAC.
Raisecom#show port-security
Port security aging time:10 (mins)
Port security recovery time:Disable (s)
port status Max-Num Cur-Num His-MaxNum vio-Count
vio-action Dynamic-Trap Aging-Type
-------------------------------------------------------------------------
-----------------------------------------
gigaethernet1/1/1 Enable 3 1 1 0
protect Enable Absolute
gigaethernet1/1/2 Enable 2 0 0 0
restrict Disable Absolute
gigaethernet1/1/3 Enable 1 1 1 0
shutdown Disable Absolute
gigaethernet1/1/4 Disable 1024 0 0 0
protect Disable Absolute
gigaethernet1/1/5 Disable 1024 0 0 0
…
Use the
show port-security mac-address
command to show configurations and learning of
secure MAC addresses.
Raisecom#show port-security mac-address
VLAN Security-MAC-Address Flag Port Age(min)
--------------------------------------------------------------------------
1 0000.0000.0001 Security-static gigaethernet1/1/1 --
1 0000.0000.0002 sticky gigaethernet1/1/3 --
10.3 Dynamic ARP inspection
10.3.1 Introduction
Dynamic ARP inspection is used for ARP protection of unsecure interface and prevents from
responding ARP packets which do not meet the requirements, thus preventing ARP spoofing
attack on the network.
