•
o apply the same settings to all interfaces, click
Edit All
.
•
Click
Submit
to apply the new settings to the system.
Table 242: Port Security Interface Configuration Fields
Field
Description
Interface
The interface associated with the rest of the data in the row. When configuring
the port security settings for one or more interfaces, this field lists the interfaces
that are being configured.
Port Security Mode
The administrative mode of the port security feature on the interface. The port
security mode must be enabled both globally and on an interface to enforce the
configured limits for the number of static and dynamic MAC addresses allowed
on that interface.
Max Dynamic Addresses
Allowed
The number of source MAC addresses that can be dynamically learned on an
interface. If an interface reaches the configured limit, any other addresses
beyond that limit are not learned, and the frames are discarded. Frames with a
source MAC address that has already been learned will be forwarded. A
dynamically-learned MAC address is removed from the MAC address table if the
entry ages out, the link goes down, or the system resets. Note that the behavior
of a dynamically-learned address changes if the sticky mode for the interface is
enabled or the address is converted to a static MAC address.
Max Static Addresses Allowed
The number of source MAC addresses that can be manually added to the port
security MAC address table for an interface. If the port link goes down, the
statically configured MAC addresses remain in the MAC address table. The
maximum number includes all dynamically-learned MAC addresses that have
been converted to static MAC addresses.
Sticky Mode
The sticky MAC address learning mode, which is one of the following:
•
Enabled – MAC addresses learned or manually configured on this interface
are learned in sticky mode. A sticky-mode MAC address is a MAC address
that does not age out and is added to the running configuration. If the
running configuration is saved to the startup configuration, the sticky
addresses are saved to persistent storage and do not need to be relearned
when the device restarts. Upon enabling sticky mode on an interface, all
dynamically learned MAC addresses in the MAC address table for that
interface are converted to sticky mode. Additionally, new addresses
dynamically learned on the interface will also become sticky.
•
Disabled – When a link goes down on a port, all of the dynamically learned
addresses are cleared from the source MAC address table the feature
maintains. When the link is restored, the interface can once again learn
addresses up to the specified limit. If sticky mode is disabled after being
enabled on an interface, the sticky-mode addresses learned or manually
configured on the interface are converted to dynamic entries and are
automatically removed from persistent storage.
Violation Trap Mode
Whether the port security feature sends a trap to the SNMP agent when a port is
locked and a frame with a MAC address not currently in the table arrives on the
port. A port is considered to be locked once it has reached the maximum
number of allowed dynamic or static MAC address entries in the port security
MAC address table.
Violation Shutdown Mode
Whether the port security feature shuts down the port after MAC limit is
reached.
Last Violation MAC/VLAN
The source MAC address and, if applicable, associated VLAN ID of the last frame
that was discarded at a locked port.
Configuring Switching Information
ExtremeSwitching 200 Series: Administration Guide
238
