296 Address Table Commands
Example
The following example adds a permanent static MAC-layer station source
address 3aa2.64b3.a245 to the MAC address table.
console(config)# mac address-table static
3AA2.64B3.A245 vlan 1 interface gigabitethernet 1/0/8
port security
Use the port security command in Interface Configuration mode to disable
the learning of new addresses on an interface. To enable new address learning,
use the no form of the port security command.
Syntax
port security [discard]
no port security
•
discard
— Discards frames with unlearned source addresses. This is the
default if no option is indicated.
Default Configuration
Disabled—No port security
Command Mode
Interface Configuration (gigabitethernet, port-channel, tengigabitethernet)
mode
User Guidelines
When port security is enabled on an interface, all dynamic entries learned up
to that point are flushed, and new entries can be learned only to the limit set
by the port security max command. The default limit is 100 dynamic MAC
addresses.
Example
In this example, frame forwarding is enabled without learning, and with traps
sent every 100 seconds on port gi1/0/1.
2CSPC4.XCT-SWUM2XX1.book Page 296 Monday, October 3, 2011 11:05 AM