C
OMMAND
L
INE
I
NTERFACE
4-102
Default Setting
Status: Disabled
Action: None
Maximum Addresses: 0
Command Mode
Interface Configuration (Ethernet)
Command Usage
• If you enable port security, the switch will stop dynamically learning
new addresses on the specified port. Only incoming traffic with source
addresses already stored in the dynamic or static address table will be
accepted.
• To use port security, first allow the switch to dynamically learn the
<source MAC address, VLAN> pair for frames received on a port for
an initial training period, and then enable port security to stop address
learning. Be sure you enable the learning function long enough to
ensure that all valid VLAN members have been registered on the
selected port.
• To add new VLAN members at a later time, you can manually add
secure addresses with the
mac-address-table static
command, or turn
off port security to re-enable the learning function long enough for new
VLAN members to be registered. Learning may then be disabled again,
if desired, for security.
• A secure port has the following restrictions:
- Cannot use port monitoring.
- Cannot be a multi-VLAN port.
- Cannot be connected to a network interconnection device.
- Cannot be a trunk port.
• If a port is disabled due to a security violation, it must be manually
re-enabled using the
no
shutdown
command.
Summary of Contents for 8612XL3
Page 2: ......
Page 26: ...CONTENTS xxvi ...
Page 40: ...INTRODUCTION 1 14 ...
Page 69: ...BASIC CONFIGURATION 3 15 ...
Page 175: ...PORT CONFIGURATION 3 121 ...
Page 337: ...IP ROUTING 3 283 Web Click Routing Protocol RIP Statistics ...
Page 379: ...MULTICAST ROUTING 3 325 Command Usage ...
Page 396: ...CONFIGURING THE SWITCH 3 342 ...
Page 582: ...COMMAND LINE INTERFACE 4 186 ...
Page 806: ... 224 Command Mode Privileged Exec Example Console clear vrrp 1 interface 1 counters Console ...
Page 826: ... 6 ...
Page 828: ...TROUBLESHOOTING B 2 ...
Page 838: ...GLOSSARY Glossary 10 ...
Page 845: ......