6 port-security timeout, 7 port-security violation – Accton Technology ES4626 User Manual
Page 215
215
Usage Guide:
The MAC address binding function must be enabled before maximum
secure MAC address number can be set. If secure static MAC address number of the
port is larger than the maximum secure MAC address number set, the setting fails; extra
secure static MAC addresses must be deleted, so that the secure static MAC address
number is no larger than the maximum secure MAC address number for the setting to be
successful.
Example:
Set the maximum secure MAC address number for port 1 to 4.
Switch(Config)#interface Ethernet 1/1
Switch(Config-Ethernet1/1)# port-security maximum 4
6.5.1.3.6 port-security timeout
Command: port-security timeout <value>
no port-security timeout
Function:
Set the timer for port locking; the “no port-security timeout” command
restores the default setting.
Parameter: < value>
is the timeout value, the valid range is 0 to 300s.
Command mode:
Interface Mode
Default:
Port locking timer is not enabled by default.
Usage Guide:
The port locking timer function is a dynamic MAC address locking function.
MAC address locking and conversion of dynamic MAC entries to secure address entries
will be performed on locking timer timeout. The MAC address binding function must be
enabled prior to running this command.
Example:
Set port1 locking timer to 30 seconds.
Switch(Config)#interface Ethernet 1/1
Switch(Config-Ethernet1/1)# port-security timeout 30
6.5.1.3.7 port-security violation
Command：port-security violation {protect | shutdown}
no port-security violation
Function：
Configure the port violation mode. The “no port-security violation” restore
the violation mode to protect
Command Mode：
Port mode
Parameter：protect
refers to protect mode;shutdown refers to shutdown mode
Default：
The port violation mode is protect by default
Usage Guide：
The port violation mode configuration is only available after the MAC
address binding function is enabled. when the port secure MAC address exceeds the
security MAC limit, if the violation mode is protect, the port only disable the dynamic
MAC address learning function; while the port will be shut if at shutdown mode. Users
can manually open the port with no shutdown command.