SWR2311P(config)#interface port1.1
SWR2311P(config-if)#port-security enable
5.4.2 Register permitted MAC addresses
[Syntax]
port-security
mac-address
no
port-security
mac-address
[Initial value]
none
[Input mode]
global configuration mode
[Description]
Registers MAC addresses that are allowed to communicate on ports for which port security has been enabled.
If this command is executed with the "no" syntax, deletes the registered address.
[Example]
Register MAC address 00:A0:DE:00:00:01 as a permitted address for LAN port #1.
SWR2311P(config)#port-security mac-address 00a0.de00.0001 forward port1.1 vlan 1
5.4.3 Set operations used for security violations
[Syntax]
port-security
violation
action
no
port-security
violation
[Parameter]
action
:
Operation used for port security violations
Operation mode
Description
discard
Discards packets
shutdown
Shuts down the port
[Initial value]
port-security violation discard
[Input mode]
interface mode
[Description]
Sets the action to be taken during a port security violation for the applicable interface.
If this command is executed with the "no" syntax, the setting returns to the default.
[Note]
When restoring ports in shutdown mode that have been shut down, use the no shutdown command.
This command can be specified only for LAN/SFP port.
[Example]
Change the operation used for a violation on LAN port #1 to "port shutdown."
SWR2311P(config)#interface port1.1
SWR2311P(config-if)#port-security violation shutdown
5.4.4 Show port security information
[Syntax]
show
port-security
status
[Input mode]
priviledged EXEC mode
[Description]
Shows the port security information.
Command Reference | Interface control |
151