Managing Physical Interfaces
Port Security Configuration
Configuration Guide
87
Learn Mode
Select the learn mode of the MAC addresses on the port. Three modes are
provided:
Dynamic
: The switch will delete the MAC addresses that are not used or
updated within the aging time. It is the default setting.
Static
: The learned MAC addresses are out of the influence of the aging time
and can only be deleted manually. The learned entries will be cleared after the
switch is rebooted.
Permanent
: The learned MAC addresses are out of the influence of the aging
time and can only be deleted manually. The learned entries will be saved even
the switch is rebooted.
3) Select the status of the port security feature.
Status
Select the status of Port Security. Three kinds of status can be selected:
Drop
: When the number of learned MAC addresses reaches the limit, the port
will stop learning and discard the packets with the MAC addresses that have
not been learned.
Forward
: When the number of learned MAC addresses reaches the limit, the
port will stop learning but send the packets with the MAC addresses that have
not been learned.
Disable
: The number limit on the port is not effective, and the switch follows the
original forwarding rules. It is the default setting.
4) Click
Apply
.
Note:
•
Port Security cannot be enabled on the member port of a LAG, and the port with Port Security
enabled cannot be added to a LAG.
•
On one port, Port Security and 802.1X cannot be enabled at the same time.
4.2 Using the CLI
Follow these steps to configure Port Security:
Step 1
configure
Enter global configuration mode.
Step 2
interface { fastEthernet
port
|
range fastEthernet
port-list
|
gigabitEthernet
port
|
range
gigabitEthernet
port-list
}
Enter interface configuration mode.
