CTC Union MSW-4424C Series, Руководство пользователя

Страница: 144 / 382

144
CHAPTER 3
INTRODUCTION TO CLI
3.9.36.6 (config-if)# port-security violation
Syntax: (configt-if)# port-security violation { protect | trap | trap-shutdown | shutdown }
Explanation:
If the limit is exceeded, the specified action will take effect.
Parameters:
{ protect | trap | trap-shutdown | shutdown }: Specify one of the actions taken when the limit is exceeded.
protect: Do not allow more than the specified limit of MAC addresses to access on a port. No action is
further taken.
trap: If Limit + 1 MAC addresses are seen on the port, send an SNMP trap. If Aging is disabled, only one
SNMP trap will be sent, but with Aging enabled, new SNMP traps will be sent every time the limit is
exceeded.
trap-shutdown: If Limit + 1 MAC addresses is seen on the port, both the “Trap” and the “Shutdown” actions
described above will be taken.
shutdown: If Limit + 1 MAC addresses is seen on the port, shut down the port. This implies that all secured
MAC addresses will be removed from the port, and no new addresses will be learned. Even if the link is
physically disconnected and reconnected on the port (by disconnecting the cable), the port will remain shut
down. There are three ways to re-open the port:
* Boot the switch
* Disable and re-enable Limit Control on the port or the switch
* Click the “Reopen” button
Example:
Send a SNMP trap when the limit is exceeded.
Negation: (configt-if)# no port-security violation
Show: > show port-security port [ interface ( <port_type> [ <v_port_type_list> ] ) ]
# show port-security port [ interface ( <port_type> [ <v_port_type_list> ] ) ]
3.9.37 (config)# privilege
Syntax: (config)# privilege { exec | configure | config-vlan | line | interface | if-vlan | ipmc-profile | snmps-host | stp-
aggr | dhcp-pool | rfc2544-profile } level <privilege> <cmd>
Explanation: This command is used to change the privilege level of commands available in Configuration mode.
Parameters:
{ exec | configure | config-vlan | line | interface | if-vlan | ipmc-profile | snmps-host | stp-aggr | dhcp-pool |
rfc2544-profile }: Specify the group command that you want to configure.
level <privilege>: Specify the privilege level. The allowed range is 0 to 15.
# config t
(config)# interface gigabitethernet 1/1-10
(config-if)# port-security violation trap