Alcatel-Lucent 060321-10, Rev. B, Справочное руководство CLI

Страница: 1913 / 2354

Learned Port Security Commands port-security port violation
OmniSwitch CLI Reference Guide March 2011 page 30-11
port-security port violation
Selects the method for handling traffic that does not comply with LPS restrictions for the specified port(s).
port-security port slot/port[-port2] violation {restrict | shutdown}
Syntax Definitions
slot/port The slot number for the module and the physical port number on that
module (for example, 3/1 specifies port 1 on slot 3).
-port2 The last port number in a range of ports you want to configure on the
same slot (for example, 3/1-4 specifies ports 1-4 on slot 3).
restrict Filters (blocks) unauthorized traffic but allows traffic that complies with
LPS restrictions to forward on the port.
shutdown The port is disabled when the port receives unauthorized traffic. No
further traffic is allowed on the port in such an instance.
Defaults
By default, the security violation mode is set to restrict when LPS is enabled on the port.
Platforms Supported
OmniSwitch 10K
Usage Guidelines
•
When a traffic violation occurs on an LPS port, a notice is sent to the switch log.
•
If the violation mode is set to restrict , unauthorized source MAC addresses are not learned in the LPS
table. However they are recorded in the source learning MAC address table with a filtered operational
status. Hence the user can view MAC addresses attempting unauthorized access to the LPS port.
Examples
-> port-security port 2/14 violation restrict
-> port-security port 4/10-15 violation shutdown
Release History
Release 7.1.1; command introduced.