User Guide
581
Configuring Port Security
Port Security Configuration
Learn Address
Mode
Select the learn mode of the MAC addresses on the port. Three modes are
provided:
Delete on Timeout
: The switch will delete the MAC addresses that are not used
or updated within the aging time. It is the default setting.
Delete on Reboot
: The learned MAC addresses are out of the influence of the
aging time and can only be deleted manually. The learned entries will be cleared
after the switch is rebooted.
Permanent
: The learned MAC addresses are out of the influence of the aging
time and can only be deleted manually. The learned entries will be saved even the
switch is rebooted.
Status
Select the status of Port Security. Three kinds of status can be selected:
Drop
: When the number of learned MAC addresses reaches the limit, the port
will stop learning and discard the packets with the MAC addresses that have not
been learned.
Forward
: When the number of learned MAC addresses reaches the limit, the port
will stop learning but send the packets with the MAC addresses that have not
been learned.
Disable
: The number limit on the port is not effective, and the switch follows the
original forwarding rules. It is the default setting.
2) Click
Apply
.
Note:
•
Port Security cannot be enabled on the member ports of a LAG, and the port with Port Security
enabled cannot be added to a LAG.
•
On one port, Port Security and 802.1x cannot be enabled at the same time.
2.2 Using the CLI
Follow these steps to configure Port Security:
Step 1
configure
Enter global configuration mode.
Step 2
interface { fastEthernet
port |
range fastEthernet
port-list |
gigabitEthernet
port |
range
gigabitEthernet
port-list |
ten-gigabitEthernet
port |
range
ten-gigabitEthernet
port-list
}
Enter interface configuration mode.
Downloaded from
