beautypg.com

Configuring port security, Configuring port security on an access port, Configuring port security on a trunk port – Brocade Network OS Administrator’s Guide v4.1.1 User Manual

Page 314: Configuring port-security mac address limits

background image

Removing the SCC_POLICY entry of rbridge-id 3 in VCS mode

switch# config

Entering configuration mode terminal

switch(config)# rbridge-id 3

switch(config-rbridge-id-3)# no secpolicy defined-policy SCC_POLICY

switch(config)# exit

switch# do show running-config secpolicy active-policy

% No entries found.

Configuring port security

The following section covers how to configure port security for access and trunk ports, set port-security
MAC address limits and shutdown time, set up OUI-based port security, and configure port security
with sticky MAC addresses.

Refer also to

Port security

on page 305.

Configuring port security on an access port

To enable port security on an access port, do the following in global configuration mode.

1. Enable interface subconfiguration mode for the interface you want to modify.

switch(config)# interface TenGigabitEthernet 1/0

2. Put the interface in Layer 2 mode by using the switchport command.

switch(conf-if-te-1/0)# switchport

3. Enable switchport security by using the switchport port-security command.

switch(conf-if-te-1/0)# switchport port-security

Configuring port security on a trunk port

To enable port security on a trunk port, do the following in global configuration mode.

1. Enable interface subconfiguration mode for the interface you want to modify.

switch(config)# interface TenGigabitEthernet 1/0

2. Put the interface in Layer 2 mode by using the switchport command.

switch(conf-if-te-1/0)# switchport

3. Set the mode of the interface to trunk.

switch(conf-if-te-1/0)# switchport mode trunk

4. Set the VLANs that will transmit and receive through the Layer 2 interface.

switch(conf-if-te-1/0)# switchport trunk allowed vlan add 100

5. Enable switchport security by using the switchport port-security command.

switch(conf-if-te-1/0)# switchport port-security

Configuring port-security MAC address limits

To configure the MAC address option for port security on an interface port, do the following in global
configuration mode.

Configuring port security

314

Network OS Administrator’s Guide

53-1003225-04