12-237
12.8 switchport port-security violation
Command:
switchport port-security violation {protect | restrict | shutdown}
no switchport port-security violation
Function:
When exceeding the maximum number of the configured MAC addresses, MAC address accessing the interface
does not belongs to this interface in MAC address table or a MAC address is configured to several interfaces in
same VLAN, both of them will violate the security of the MAC address.
Parameter:
protect
：
Protect mode, it will trigger the action that do not learn the new MAC, drop the package and do not send the
warning.
restrict
：
Restrict mode, it will trigger the action that do not learn the new MAC, drop the package, send snmp trap and
record the configuration in syslog.
shutdown
：
Shutdown mode is the default mode. Under this condition, the interface is disabled directly, send snmp
trap and record the configuration in syslog.
Default:
Shutdown.
Command Mode:
Port mode
Usage Guide:
None.
Example:
Configure violation mode as protect for the interface.
Switch(config-if-ethernet1/1)#switchport port-security violation protect