Kontron AT8404 CLI - Manual (Page 147)

AT8404 Switching Commands
Page 2 - 111 AT8404 CLI Reference Manual
2.22 Port Security Commands
This section describes the command you use to configure Port Security on the switch. Port security, which is also
known as port MAC locking, allows you to secure the network by locking allowable MAC addresses on a given port.
Packets with a matching source MAC address are forwarded normally, and all other packets are discarded.
2.22.1 port-security
This command enables port locking at the system level (Global Config) or port level (Interface Config)
.
2.22.1.1 no port-security
This command disables port locking for one (Interface Config) or all (Global Config) ports.
2.22.2 port-security max-dynamic
This command sets the maximum number of dynamically locked MAC addresses allowed on a specific port.
2.22.2.1 no port-security max-dynamic
This command resets the maximum number of dynamically locked MAC addresses allowed on a specific port to its
default value.
2.22.3 port-security max-static
This command sets the maximum number of statically locked MAC addresses allowed on a port.
Note: To enable the SNMP trap specific to port security, see 5.8.7 “snmp-server enable traps violation”
on page 5 - 23.
Default disabled
Format port-security
Mode • Global Config
• Interface Config
Format no port-security
Mode • Global Config
• Interface Config
Default 600
Format port-security max-dynamic
Mode Interface Config
Format no port-security max-dynamic
Mode Interface Config
Default 20
Format port-security max-static
Mode Interface Config