Alcatel-Lucent OmniSwitch 6250, Справочное руководство CLI, Страница: 659 / 2018

Learned Port Security Commands
OmniSwitch 6250 CLI Reference Guide November 2009 page 19-11
port-security mac
Configures a single authorized source MAC address for a port that belongs to a specified VLAN.
port-security slot/port mac mac_address [vlan vlan_id]
port-security slot/port no mac {all | mac_address} [vlan vlan_id]
Syntax Definitions
slot/port Enter the slot number for the module and the physical port number on
that module (e.g., 3/1 specifies port 1 on slot 3).
mac_address The source MAC address (e.g., 00:da:39:59:f1:0c) of the port.
vlan_id The VLAN or the tagged VLAN to which the LPS port belongs. The
range is 1–4094.
Defaults
By default, the default VLAN for the port is used.
Platforms Supported
OmniSwitch 6250
Usage Guidelines
•
Use the no form of this command to remove statically configured or dynamically learned source MAC
address entries from the LPS table. When a MAC address is removed from the LPS table, it is automat-
ically cleared from the source learning table at the same time.
•
LPS should be enabled on the port before configuring a MAC address. If an attempt is made to config-
ure a MAC address on a non-LPS port, an error message is displayed.
•
Any additional source MAC addresses received that do not match configured authorized addresses are
allowed on the port based on the LPS time limit (if active) and maximum number of MAC addresses
allowed.
•
Each configured authorized MAC address counts towards the number of addresses allowed on the port
even if the port has not learned the configured address. For example, if a port has 3 configured autho-
rized MAC addresses and the maximum number of addresses allowed is set to 10, then only 7 addi-
tional MAC addresses are allowed on that port.
Examples
-> port-security 4/20 mac 00:20:95:00:fa:5c vlan 2
-> port-security 2/11 no mac 00:20:95:00:fa:5c
Release History
Release 6.6.1; command was introduced.