Enterasys Networks D-Series - Manual (Page 516)

set maclock enable
17-54 Security Configuration
set maclock enable
Use this command to enable MAC locking globally or on one or more ports.
Syntax
set maclock enable [port‐string]
Parameters
Defaults
If port‐string is not specified, MAC locking will be enabled globally.
Mode
Switch command, read‐write.
Usage
When enabled and configured, MAC locking defines which MAC addresses, as well as how many
MAC addresses are permitted to use specific port(s).
MAC locking is disabled by default at device startup. Configuring one or more ports for MAC
locking requires globally enabling it on the device and then enabling it on the desired ports.
Example
This example shows how to enable MAC locking on fe.2.3:
D2(su)->set maclock enable fe .2.3
Table 17-48 show maclock stations Output Details
Output Field What It Displays...
Port Number Port designation. For a detailed description of possible port-string values, refer to
“
Port String Syntax Used in the CLI ” on page 6-1.
MAC address MAC address of the end station(s) locked to the port.
Status Whether the end stations are active or inactive.
State Whether the end station locked to the port is a first arrival or static connection.
Aging When true, FirstArrival MACs that have aged out of the forwarding database will be
removed for the associated port lock.
Note: MAC locking needs to be enabled globally and on appropriate ports for it to function.
port‐string (Optional) Enables MAC locking on specific port(s). For a detailed
description of possible port‐string values, refer to “
Port String Syntax Used
in the CLI ” on page 6‐1.