Alcatel-Lucent 6600 Learned Port Security Overview

Learned Port Security Overview Configuring Learned Port Security
page 3-4 OmniSwitch 6600 Family Network Configuration Guide April 2006
Learned Port Security Overview
Learned Port Security (LPS) provides a mechanism for controlling network device access on one or more
switch ports. Configurable LPS parameters allow the user to restrict the source learning of host MAC
addresses to:
•A specific amount of time in which the switch allows source learning to occur on all LPS ports.
•A maximum number of learned MAC addresses allowed on the port.
•A list of configured authorized source MAC addresses allowed on the port.
Additional LPS functionality allows the user to specify how the LPS port handles unauthorized traffic. The
following two options are available for this purpose:
•Block only traffic that violates LPS port restrictions; authorized traffic is forwarded on the port.
•Disable the LPS port when unauthorized traffic is received; all traffic is stopped and a port reset is
required to return the port to normal operation.
LPS functionality is supported on the following 10/100 and Gigabit Ethernet port types:
•Fixed (non-mobile)
•Mobile
•802.1Q tagged
•Authenticated
The following port types are not supported:
•Link aggregate
•Tagged (trunked) link aggregate