Enterasys SecureStack C2, Руководство по настройке, Страница: 577 / 607

set maclock firstarrival
SecureStack C2 Configuration Guide 18-53
Defaults
None.
Mode
Switch command, read ‐ write.
Example
This example shows how to reset the number of allowable static MACs on
ge
.2.3:
C2(rw)->clear maclock static ge.2.3
set maclock firstarrival
Use this command to restrict MAC locking on a port to a maximum number of end station
addresses first connected to that port.
Syntax
set maclock firstarrival port-string value
Parameters
Defaults
None.
Mode
Switch command, read ‐ write.
Usage
The maclock first arrival count resets when the link goes down. This feature is beneficial if you
have roaming users—the first arrival count will be reset every time a user moves to another port,
but will still protect against connecting multiple devices on a single port and will protect against
MAC address spoofing.
If you wish to have only statically set MACs, set a port’s first arrival limit to 0.
Example
This example shows how to restrict MAC locking to 6 MAC addresses on
ge
.2.3:
C2(su)->set maclock firstarrival ge.2.3 6
clear maclock firstarrival
Use this command to reset the number of first arrival MAC addresses allowed per port to the
default value of 600.
port ‐ string Specifies the port on which to limit MAC locking. For a detailed
description of possible port ‐ string values, refer to “ Port String Syntax Used
in the CLI ” on page 5 ‐ 2.
value Specifies the number of first arrival end station MAC addresses to be
allowed connections to the port. Valid values are 0 to 600 .