Ruijie Networks RG-S2600E Series, Справочное руководство CLI

Страница: 671 / 1191

S2600E CLI Reference Guide Chapter 7 Port-based Flow Control Configuration Commands
Usage
guidelines
With port security, you can strictly control the input on a specific port
by restricting access to the MAC address and IP address (optional) of
the port on the switch. After you configure some secure addresses for
the port security-enabled port, only the packets from these addresses
can be forwarded. In addition, you can also restrict the maximum
number of secure addresses on a port. If you set the maximum value
to 1 and configure one secure address for this port, the workstation
(whose address is the configured secure Mac address) connected to
this port will occupy all the bandwidth of this port exclusively.
Examples
This example shows how to enable port security on interface
gigabitethernet 1/1, and the way to deal with violation is shutdown :
Ruijie(config)# interface gigabitethernet 1/1
Ruijie(config-if)# switchport port-security
Ruijie(config-if)# switchport port-security violation
shutdown
Command Description
Related
commands
show port-security Show port security settings.
7.1.4 switchport port-security
aging
Use this command to set the aging time for all secure addresses on a interface. To enable this
function, you need to set the maximum number of secure addresses. In this way, you can
make the switch automatically add or delete the secure addresses on the interface. Use the no
form of the command to apply the aging time on automatically learned address or to disable
the aging.
switchport port-security aging {static | time time }
no switchport port-security aging {static | time }
Parameter Description
static Apply the aging time to both manually
configured secure addresses and
automatically learned addresses.
Otherwise, apply it to only the
automatically learned secure addresses.
Parameter
description
time time Specify the aging time for the secure
address on this port. Its range is 0-1440 in
minutes. If you set it to 0, the aging
function is disabled actually.