224
port-security violation {protect |
shutdown}
no port-security violation
Set the violation mode for the port;
the “
no port-security violation
”
command restores the default
setting.
7.6.1.3 Command For MAC Address Binding configuration
7.6.1.3.1 clear port-security dynamic
Command: clear port-security dynamic [address <mac-addr> | interface
<interface-id> ]
Function:
Clear the Dynamic MAC addresses of the specified port.
Command mode: Admin Mode
Parameter: <mac-addr>
stands MAC address;
<interface-id>
for specified port number.
Usage Guide:
The secure port must be locked before dynamic MAC clearing operation
can be perform in specified port. If no ports and MAC are specified, then all dynamic
MAC in all locked secure ports will be cleared; if only port but no MAC address is
specified, then all MAC addresses in the specified port will be cleared.
Example:
Delete all dynamic MAC in port1.
Switch#clear port-security dynamic interface Ethernet 1/1
7.6.1.3.2 port-security
Command:port security
no port security
Function:
Enable MAC address binding function for the port and lock the port. When a
port is locked, the MAC address learning function for the port will be disabled: the “
no
port-security”
command disables the MAC address binding function for the port and
restores the MAC address learning function for the port.
Command mode:
Interface Mode
Default:
MAC address binding is not enabled by default.
Usage Guide:
The MAC address binding function, Spanning Tree and Port Aggregation
functions are mutually exclusive. Therefore, if MAC binding function for a port is to be
enabled, the Spanning Tree and Port Aggregation functions must be disabled, and the
port enabling MAC address binding must not be a Trunk port.
Example:
Enable MAC address binding function for port 1and and lock the port. When a
port is locked, the MAC address learning function for the port will be disabled.
Switch(Config)#interface Ethernet 1/1
Switch(Config-Ethernet1/1)#port security
7.6.1.3.3 port-security convert
Command: port-security convert
